Lucene search
+L

1001 matches found

NVD
NVD
added 2025/11/22 9:15 a.m.11 views

CVE-2025-13136

The GSheetConnector For Ninja Forms plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check on the 'njform-google-sheet-config ' page in all versions up to, and including, 2.0.1. This makes it possible for authenticated attackers, with Subscriber-level...

4.3CVSS0.00195EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
added 2025/11/22 8:30 a.m.4 views

CVE-2025-13136 GSheetConnector For Ninja Forms <= 2.0.1 - Missing Authorization to Authenticated (Subscriber+) System Information Exposure

The GSheetConnector For Ninja Forms plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check on the 'njform-google-sheet-config ' page in all versions up to, and including, 2.0.1. This makes it possible for authenticated attackers, with Subscriber-level...

4.3CVSS4.6AI score0.00195EPSS
SaveExploits0References2
Cvelist
Cvelist
added 2025/11/22 8:30 a.m.15 views

CVE-2025-13136 GSheetConnector For Ninja Forms <= 2.0.1 - Missing Authorization to Authenticated (Subscriber+) System Information Exposure

The GSheetConnector For Ninja Forms plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check on the 'njform-google-sheet-config ' page in all versions up to, and including, 2.0.1. This makes it possible for authenticated attackers, with Subscriber-level...

4.3CVSS0.00195EPSS
SaveExploits0References2
CVE
CVE
added 2025/11/22 8:30 a.m.17 views

CVE-2025-13136

CVE-2025-13136 affects the WordPress plugin GSheetConnector For Ninja Forms (

4.3CVSS4.6AI score0.00195EPSS
SaveExploits0References2
Patchstack
Patchstack
added 2025/11/22 12:3 a.m.9 views

WordPress GSheetConnector For Ninja Forms plugin <= 2.0.1 - Missing Authorization to Authenticated (Subscriber+) System Information Exposure vulnerability

Missing Authorization to Authenticated Subscriber+ System Information Exposure vulnerability discovered by Bhayanak Atma in WordPress Plugin Ninja Forms Google Sheet Connector versions = 2.0.1...

4.3CVSS6.9AI score0.00195EPSS
SaveExploits0References1Affected Software1
CNNVD
CNNVD
added 2025/11/22 12:0 a.m.10 views

WordPress plugin GSheetConnector For Ninja Forms 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform has the ability to host personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin. A security vulnerabili...

4.3CVSS6.3AI score0.00195EPSS
SaveExploits0References3
CNVD
CNVD
added 2025/11/18 12:0 a.m.7 views

WordPress Popup addon for Ninja Forms plugin cross-site scripting vulnerability

WordPress Popup addon for Ninja Forms plugin is a WordPress form plugin that supports the creation of contact forms, signup forms and more. Its Popup/Modal plugin generates informational or promotional popups for email subscriptions, login signups, and other scenarios. A cross-site scripting...

5.9CVSS6.1AI score0.00162EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2025/11/14 10:11 a.m.17 views

CVE-2025-64264

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Aman Popup addon for Ninja Forms popup-addon-for-ninja-forms allows Stored XSS.This issue affects Popup addon for Ninja Forms: from n/a through = 3.5.1...

5.9CVSS6AI score0.00162EPSS
SaveExploits0References1
EUVD
EUVD
added 2025/11/13 12:31 p.m.6 views

EUVD-2025-163781

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Aman Popup addon for Ninja Forms popup-addon-for-ninja-forms allows Stored XSS.This issue affects Popup addon for Ninja Forms: from n/a through = 3.5.1...

5.9CVSS5.5AI score0.00162EPSS
SaveExploits0References2
NVD
NVD
added 2025/11/13 10:15 a.m.15 views

CVE-2025-64264

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Aman Popup addon for Ninja Forms popup-addon-for-ninja-forms allows Stored XSS.This issue affects Popup addon for Ninja Forms: from n/a through = 3.5.1...

5.9CVSS0.00162EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2025/11/13 9:24 a.m.5 views

CVE-2025-64264 WordPress Popup addon for Ninja Forms plugin <= 3.5.1 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Aman Popup addon for Ninja Forms popup-addon-for-ninja-forms allows Stored XSS.This issue affects Popup addon for Ninja Forms: from n/a through = 3.5.1...

5.9CVSS5.6AI score0.00162EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2025/11/13 9:24 a.m.23 views

CVE-2025-64264 WordPress Popup addon for Ninja Forms plugin <= 3.5.1 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Aman Popup addon for Ninja Forms popup-addon-for-ninja-forms allows Stored XSS.This issue affects Popup addon for Ninja Forms: from n/a through = 3.5.1...

5.9CVSS0.00162EPSS
SaveExploits0References1
CVE
CVE
added 2025/11/13 9:24 a.m.20 views

CVE-2025-64264

Summary: CVE-2025-64264 affects the WordPress Popup addon for Ninja Forms plugin (versions ≤ 3.5.1). The issue is an "Improper Neutralization of Input During Web Page Generation" (Stored XSS) vulnerability caused by insufficient filtering/escaping of user-supplied data in the popup addon. The con...

5.9CVSS5.6AI score0.00162EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2025/11/13 12:0 a.m.17 views

WordPress plugin Popup addon for Ninja Forms 安全漏洞

WordPress Popup addon for Ninja Forms plugin is a WordPress form plugin that supports the creation of contact forms, signup forms and more. Its Popup/Modal plugin generates informational or promotional popups for email subscriptions, login signups, and other scenarios. A cross-site scripting...

5.9CVSS5.8AI score0.00162EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2025/11/13 12:0 a.m.17 views

PT-2025-46800

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Aman Popup addon for Ninja Forms popup-addon-for-ninja-forms allows Stored XSS.This issue affects Popup addon for Ninja Forms: from n/a through = 3.5.1...

5.9AI score0.00162EPSS
SaveExploits0References2
Patchstack
Patchstack
added 2025/10/31 9:51 a.m.9 views

WordPress Popup addon for Ninja Forms plugin <= 3.5.1 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by Kim YunJi in WordPress Plugin Popup addon for Ninja Forms versions = 3.5.1...

5.9CVSS6.1AI score0.00162EPSS
SaveExploits0Affected Software1
EUVD
EUVD
added 2025/10/07 12:30 a.m.7 views

EUVD-2020-4771

Malware in sbrugna...

6.1CVSS6.3AI score0.00459EPSS
SaveExploits0References2
EUVD
EUVD
added 2025/10/07 12:30 a.m.6 views

EUVD-2018-19014

Malware in sbrugna...

6.1CVSS6.2AI score0.00775EPSS
SaveExploits0References2
EUVD
EUVD
added 2025/10/07 12:30 a.m.5 views

EUVD-2020-29442

Malware in sbrugna...

5.4CVSS5.6AI score0.01195EPSS
SaveExploits1References4
EUVD
EUVD
added 2025/10/07 12:30 a.m.8 views

EUVD-2018-13517

Malware in sbrugna...

9.1CVSS9.3AI score0.01744EPSS
SaveExploits0References2
Rows per page
Query Builder