WordPress Ninja Forms Vulnerabilities
Wordpress Ninja Forms vulnerabilities.
Vulnerability Published:
🗓️ Published
- Anytime
Sort By:
🗓️ Published Date
- Descending
Arbitrary Shortcode Execution Vulnerability in Ninja Forms Plugin for WordPress
CVE-2024-12238WordpressNinja Forms – The Cont...6.3MEDIUMNinja Forms Vulnerable to Stored Cross-Site Scripting
CVE-2024-11052WordpressNinja Forms – The Cont...7.2HIGHFreemius SDK Vulnerabilities Affect Hundreds of WordPress Plugins and Themes
CVE-2022-4974WordpressYasr – Yet Another Sta...6.3MEDIUMSelf-Based Cross-Site Scripting Vulnerability Affects Ninja Forms Contact Form Plugin
CVE-2024-3866WordpressNinja Forms – The Cont...6.1MEDIUMStored Cross-Site Scripting Vulnerability in File Uploads Plugin
CVE-2024-1596WordpressNinja Forms - File Upl...6.1MEDIUMNinja Forms Plugin Vulnerable to Reflected Cross-Site Scripting
CVE-2024-7354WordpressNinja Forms👾🟡6.1MEDIUMStored Cross-Site Scripting Vulnerability in Ninja Forms Contact Form
CVE-2024-2108WordpressNinja Forms Contact Fo...5.4MEDIUMCross-Site Request Forgery Vulnerability in Ninja Forms Contact Form Plugin
CVE-2024-2113WordpressNinja Forms Contact Fo...4.3MEDIUMUnauthenticated SQL Injection Vulnerability in Ninja Forms Contact Form Plugin
CVE-2024-0685WordpressNinja Forms Contact Fo...9.8CRITICALWordPress Ninja Forms Plugin <= 3.6.25 is vulnerable to Denial of Service Attack
CVE-2023-35909WordpressNinja Forms Contact Fo...5.3MEDIUMWooCommerce Ninja Forms Product Add-ons < 1.7.1 - Unauthenticated Arbitrary File Upload
CVE-2023-5601WordpressWooCommerce Ninja Form...9.8CRITICALNinja Forms < 3.6.34 - Admin+ Stored XSS
CVE-2023-5530WordpressNinja Forms Contact Form4.8MEDIUMNinja Forms < 3.6.26 - Admin+ Stored HTML Injection
CVE-2023-4109WordpressNinja Forms Contact Form4.8MEDIUMNinja Forms Google Sheet Connector < 1.2.7 - Reflected XSS
CVE-2023-2333WordpressNinja Forms Google She...6.1MEDIUMNinja Forms < 3.6.22 - Reflected XSS
CVE-2023-1835WordpressNinja Forms Contact Form👾🟡6.1MEDIUMNinjaForms < 3.6.13 - Admin+ PHP Objection Injection
CVE-2022-2903WordpressNinja Forms Contact Fo...7.2HIGHNinja Forms < 3.6.10 - Admin+ Stored Cross-Site Scripting via Import
CVE-2021-25066WordpressNinja Forms Contact Fo...4.8MEDIUMNinja Forms < 3.6.10 - Admin+ Stored Cross-Site Scripting
CVE-2021-25056WordpressNinja Forms Contact Fo...4.8MEDIUMWordPress Ninja Forms Contact Form plugin <= 3.6.9 - Authenticated Stored Cross-Site Scripting (XSS) vulnerability
CVE-2021-36827WordpressNinja Forms Contact Fo...4.8MEDIUMNinja Forms - File Uploads Extension <= 3.3.0 - Arbitrary File Upload
CVE-2022-0888WordpressNinja Forms - File Upl...9.8CRITICALNinja Forms - File Uploads Extension <= 3.3.12 - Reflected Cross-Site Scripting
CVE-2022-0889WordpressNinja Forms - File Upl...6.1MEDIUMNinja Forms < 3.6.4 - Admin+ SQL Injection
CVE-2021-24889WordpressNinja Forms Contact Fo...7.2HIGHNinjaForms < 3.5.8.2 - Admin+ Stored Cross-Site Scripting
CVE-2021-24381WordpressNinja Forms Contact Fo...4.8MEDIUMNinja Forms <= 3.5.7 Sensitive Information Disclosure
CVE-2021-34647WordpressNinja Forms6.5MEDIUMNinja Forms <= 3.5.7 Unprotected REST-API to Email Injection
CVE-2021-34648WordpressNinja Forms6.4MEDIUM