1260 matches found
CVE-2018-7280
The Ninja Forms plugin before 3.2.14 for WordPress has XSS...
Cross site scripting
The Ninja Forms plugin before 3.2.14 for WordPress has XSS...
CVE-2018-7280
CVE-2018-7280 affects the WordPress Ninja Forms plugin prior to 3.2.14 (i.e., versions
CVE-2018-7280
The Ninja Forms plugin before 3.2.14 for WordPress has XSS...
CVE-2018-7280: Improper Neutralization of Input During Web Page Generation
The Ninja Forms plugin before 3.2.14 for WordPress has XSS...
Ninja Forms <= 3.2.13 - Cross-Site Scripting (XSS)
The Ninja Forms Contact Form – The Drag and Drop Form Builder for WordPress WordPress plugin was affected by a Cross-Site Scripting XSS security vulnerability...
Ninja Forms < 3.0.31 - XSS
The Ninja Forms Contact Form – The Drag and Drop Form Builder for WordPress WordPress plugin was affected by a XSS security vulnerability...
WordPress Ninja Forms Plugin SQL Injection
An SQL injection vulnerability exists in the WordPress Ninja Forms Plugin. It allows an authenticated remote attacker to inject or manipulate SQL queries in the back-end database, allowing for the manipulation or disclosure of arbitrary data...
Ninja Forms <= 2.9.55.1 - Authenticated SQL Injection
The Ninja Forms Contact Form – The Drag and Drop Form Builder for WordPress WordPress plugin was affected by an Authenticated SQL Injection security vulnerability...
WordPress Ninja Forms Plugin <= 2.9.55.1 - Authenticated SQL Injection
There is a bug in this plugin. It could leak the site’s usernames and hashed passwords. Solution Update the plugin...
WordPress Ninja Forms Plugin Cross-Site Scripting Vulnerability
WordPress is the WordPress Software Foundation's set of blogging platform developed using the PHP language , the platform supports in PHP and MySQL servers to set up a personal blog site . Ninja Forms is one of the form plug-ins . A cross-site scripting vulnerability exists in version 2.9.51 of t...
Ninja Forms <= 2.9.51 - Multiple Authenticated Cross-Site Scripting (XSS)
The Ninja Forms Contact Form – The Drag and Drop Form Builder for WordPress WordPress plugin was affected by a Multiple Authenticated Cross-Site Scripting XSS security vulnerability...
WordPress Ninja Forms Plugin <= 2.9.51 - Multiple Cross Site Scripting
Because of this vulnerability, attackers can inject malicious JavaScript code into the application. Solution Update this plugin...
WordPress Ninja Forms 2.9.51 Cross Site Scripting
------------------------------------------------------------------------ Multiple Cross-Site Scripting vulnerabilities in Ninja Forms WordPress Plugin ------------------------------------------------------------------------ Han Sahin, July 2016...
WordPress Ninja Forms Unauthenticated File Upload
No description provided by source...
WordPress Ninja Forms Unauthenticated File Upload
This module requires Metasploit: http://www.metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework require 'msf/core' class MetasploitModule 'WordPress Ninja Forms Unauthenticated File Upload', 'Description' = % Versions 2.9.36 to 2.9.42 of the Ninja Forms plugin...
WordPress Ninja Forms Plugin PHP Object Injection Hole
WordPress is the WordPress Software Foundation's set of blogging platform developed using the PHP language , the platform supports in PHP and MySQL servers to set up a personal blog site . Ninja Forms is one of the form plug-ins . A security vulnerability exists in the WordPress Ninja Forms plugi...
CVE-2016-1209
The Ninja Forms plugin before 2.9.42.1 for WordPress allows remote attackers to conduct PHP object injection attacks via crafted serialized values in a POST request...
