WordPress Plugin Vulnerabilities

Ninja Forms <= 2.9.27 - Malicious File Export

Description

The Ninja Forms Contact Form – The Drag and Drop Form Builder for WordPress WordPress plugin was affected by a Malicious File Export security vulnerability.

Affects Plugins

Plugin icon
ninja-forms
Fixed in 2.9.28

References

Miscellaneous

Submitter
ethicalhack3r
Submitter twitter
ethicalhack3r
Verified
No
WPVDB ID
a3146860-4065-437b-8a17-7a8ac802c565

Timeline

Publicly Published
2015-09-30 (about 10 years ago)
Added
2015-10-05 (about 10 years ago)
Last Updated
2019-10-31 (about 6 years ago)

Other

Published
Title
Published
2024-10-28
Title
Marketing Automation by AZEXO <= 1.27.80 - Authenticated (Subscriber+) Privilege Escalation
Published
2018-06-07
Title
Booking Calendar < 2.2.3 - Parameters Tampering Allowing Arbitrary Prices Change
Published
2023-09-25
Title
Staff / Employee Business Directory for Active Directory < 1.3 - Admin LDAP Credentials Retrieval
Published
2025-10-14
Title
Binary MLM Plan < 5.0 - Unauthenticated Limited Privilege Escalation
Published
2024-10-14
Title
RS-Members <= 1.0.3 - Authenticated (Subscriber+) Privilege Escalation