Lucene search
PRIOn knowledge basePRION:CVE-2022-2903HistorySep 26, 2022 - 1:15 p.m.
Design/Logic Flaw
2022-09-2613:15:00
PRIOn knowledge base
www.prio-n.com
6
ninja forms
wordpress plugin
php object injection
unserialization
admin takeover
security vulnerability
The Ninja Forms Contact Form WordPress plugin before 3.6.13 unserialises the content of an imported file, which could lead to PHP object injections issues when an admin import (intentionally or not) a malicious file and a suitable gadget chain is present on the blog.
| CPE | Name | Operator | Version |
|---|---|---|---|
| ninja_forms | lt | 3.6.13 |
Related
openvas
openvas
WordPress Ninja Forms Plugin < 3.6.13 Insecure Deserialization Vulnerability
2022-09-28 00:00:00
wpexploit
wpexploit
NinjaForms < 3.6.13 - Admin+ PHP Objection Injection
2022-09-05 00:00:00
nvd
nvd
CVE-2022-2903
2022-09-26 13:15:10
patchstack
patchstack
wpvulndb
wpvulndb
NinjaForms < 3.6.13 - Admin+ PHP Objection Injection
2022-09-05 00:00:00
cve
cve
CVE-2022-2903
2022-09-26 13:15:10
cvelist
cvelist
CVE-2022-2903 NinjaForms < 3.6.13 - Admin+ PHP Objection Injection
2022-09-26 12:35:34