1316 matches found
WordPress Ninja Forms plugin Access Control Error Vulnerability
WordPress is a blogging platform developed by the WordPress Wordpress Foundation using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.Ninja Forms plugin is a form creation component used in it. WordPress Ninja Forms plugin before 3.4.27.1 suffers from an Acce...
PT-2021-11953
Name of the Vulnerable Software and Affected Versions: Ninja Forms plugin versions prior to 3.4.28 Description: The issue is related to a lack of escaping for submissions-table fields in the Ninja Forms plugin for WordPress. This could potentially lead to security issues, although specific detail...
PT-2021-11954
Name of the Vulnerable Software and Affected Versions: Ninja Forms plugin versions prior to 3.4.27.1 Description: The issue allows for CSRF via services integration. Recommendations: For versions prior to 3.4.27.1, update to version 3.4.27.1 or later to resolve the issue...
WordPress Ninja Forms plugin Cross-Site Request Forgery Vulnerability
WordPress is a set of blogging platforms developed using the PHP language by the WordPress Wordpress Foundation. The platform supports setting up personal blog sites on servers with PHP and MySQL. WordPress Ninja Forms plugin before 3.4.27.1 suffers from a cross-site request forgery vulnerability...
WordPress Ninja Forms plugin code issue vulnerability
WordPress is a blogging platform developed by the WordPress Wordpress Foundation using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.Ninja Forms plugin is a form creation component used in it. A code issue exists in the WordPress Ninja Forms plugin before...
CVE-2020-36174: Cross-Site Request Forgery (CSRF)
The Ninja Forms plugin before 3.4.27.1 for WordPress allows CSRF via services integration...
PT-2021-11955
Name of the Vulnerable Software and Affected Versions: Ninja Forms plugin versions prior to 3.4.27.1 Description: The issue allows attackers to bypass validation via the email field. This can be exploited by attackers to potentially send unauthorized emails or bypass email-related security...
CVE-2020-36175: Improper Input Validation
The Ninja Forms plugin before 3.4.27.1 for WordPress allows attackers to bypass validation via the email field...
CVE-2020-36173: Improper Encoding or Escaping of Output
The Ninja Forms plugin before 3.4.28 for WordPress lacks escaping for submissions-table fields...
Ninja Forms < 3.4.27.1 - CSRF leading to Arbitrary Plugin Installation
The plugin is affected by a Cross-Site Request Forgery CSRF which could allow attackers to make a logged administrator install an arbitrary plugin from the WordPress repository. PoC http://example.com/wp-admin/admin-ajax.php?action=nfservicesinstall=wpscanpath=wpscan/wpscan.php...
Ninja Forms < 3.4.27.1 - CSRF leading to Arbitrary Plugin Installation
The plugin is affected by a Cross-Site Request Forgery CSRF which could allow attackers to make a logged administrator install an arbitrary plugin from the WordPress repository. http://example.com/wp-admin/admin-ajax.php?action=nfservicesinstall&plugin=wpscan&installpath=wpscan/wpscan.php...
Ninja Forms < 3.4.27.1 - Validation Bypass via Email Field
The plugin did not correctly validate the email address field...
Ninja Forms < 3.4.28 - Stored Cross-Site Scripting
The plugin did not escape HTML content of fields in the submissions table, which could lead to Cross-Site Scripting issues...
WordPress Ninja Forms Plugin < 3.4.24.2 CSRF Vulnerability
The WordPress plugin Copyright C 2020 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can redistribute it and/or modify it...
WordPress Cross-Site Request Forgery Vulnerability (CNVD-2020-27083)
WordPress is the WordPress Foundation's set of blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers. ninja-forms is a contact form creation plugin used in it. A security vulnerability exists in WordPress ninja-forms versions prior ...
CVE-2020-12462
The ninja-forms plugin before 3.4.24.2 for WordPress allows CSRF with resultant XSS...
CVE-2020-12462
The ninja-forms plugin before 3.4.24.2 for WordPress allows CSRF with resultant XSS...
CVE-2020-12462
CVE-2020-12462 affects the WordPress Ninja Forms plugin prior to 3.4.24.2. Multiple sources (Red Hat, CVE/NVD, WPVulndB) describe a CSRF bug that can yield a stored XSS condition via the plugin’s import/contact features. Root cause: CSRF vulnerability exploited to inject arbitrary JavaScript. Imp...
