CVE-2019-10869

CVE-2019-10869 Wordpress Ninja Forms File Uploads Extension -----------------------------16345274557837-- Response: HTTP/1.1 200 OK Server: nginx/1.14.0 "data": "files": "name":"test.png.doc", "type":"application/msword", "tmpname":"nftmp-14FpD-test.png.doc", "erro...

CVE-2023-37979

CVE-2023-37979 Unauth. Reflected Cross-Site Scripting XSS vulnerability in Saturday Drive Ninja Forms Contact Form plugin = 3.6.25 versions. PoC and Checker , for educational purposes only 'python3 exploit.py https://target.com'...

WordPress Ninja Forms <3.4.34 - Open Redirect

WordPress Ninja Forms plugin before 3.4.34 contains an open redirect vulnerability via the wpajaxnfoauthconnect AJAX action, due to the use of a user-supplied redirect parameter and no protection in place. An attacker can redirect a user to a malicious site and possibly obtain sensitive...

WordPress Ninja Forms <3.3.18 - Cross-Site Scripting

WordPress Ninja Forms plugin before 3.3.18 contains a cross-site scripting vulnerability. An attacker can inject arbitrary script in includes/Admin/Menus/Submissions.php via the begindate, enddate, or formid parameters. This can allow an attacker to steal cookie-based authentication credentials a...

Ninja Forms 3.8.6-3.8.10 - Cross-Site Scripting

The Ninja Forms WordPress plugin before 3.8.11 does not escape an URL before outputting it back in an attribute, leading to a Reflected Cross-Site Scripting which could be used against high privilege users such as admin id: CVE-2024-7354 info: name: Ninja Forms 3.8.6-3.8.10 - Cross-Site Scripting...

ninja-forms-brute

Ninja Forms 3.6.8 - 인증되지 않은 이메일 주소 노출 설명 이 플러그인은 제출 항목을 내보낼 때 생성된 임시 파일을 삭제하지 않습니다. 그 결과, 해당 파일이 공개적으로 접근 가능하고 이름을 추측할 수 있는 경우, 인증되지 않은 공격자가 파일을 다운로드하여 양식을 제출한 사용자의 이메일 주소와 같은 민감한 정보를 얻을 수 있습니다. 개념 증명 내보낸 CSV"모든 제출 항목 다운로드" 버튼을 통해 모든 제출 항목을 내보낼 때 생성됨는 다음 형식을 사용하여 /wp-content/uploads// 폴더에 저장됩니다:...

CVE-2026-0740

CVE-2026-0740 : Ninja Forms - File Upload = 3.3.26 인증되지 않은 임의 파일 업로드. 설명 : WordPress용 Ninja Forms - File Uploads 플러그인은 3.3.26을 포함한 모든 버전에서 'NFFUAJAXControllersUploads::handleupload' 함수의 파일 유형 검증 누락 및 기능 검사 누락으로 인해 인증되지 않은 임의 파일 업로드에 취약합니다. 이 결함으로 인해 인증되지 않은 공격자는 다음을 수행할 수 있습니다: 모든 fieldid에 대한 유효한...

CVE-2026-0740

ninja.py WordPress 사이트의 Ninja Forms 플러그인을 대상으로 하는 파일 업로드 엔드포인트를 사용하는 실험적/도구 스크립트입니다. list.txt에 있는 대상에 순차적으로 요청을 보내고, 성공한 업로드를 shell.txt 파일에 기록합니다. 요구 사항 Python 3 requests urllib3와 함께 일반적으로 설치됨 pip install requests urllib3 파일 구성 파일| 설명 ---|--- ninja.py| 메인 스크립트. list.txt| 대상 URL; 각 줄에 하나의 URL...

Ninja Forms File Uploads <= 3.3.26 - Arbitrary File Upload

Ninja Forms File Uploads plugin for WordPress versions up to and including 3.3.26 is vulnerable to unauthenticated arbitrary file upload which could lead to remote code execution. id: CVE-2026-0740 info: name: Ninja Forms File Uploads = 3.3.26 - Arbitrary File Upload author: whattheslime severity...

CVE-2026-0740

CVE-2026-0740 Ninja Forms File Uploads = 3.3.26 - Unauthenticated Arbitrary File Upload to RCE Exploit for CVE-2026-0740 discovered by Selim Lanouar whattheslime. For a complete technical deep dive, read the full article on Lexfo's blog. Disclaimer This repository is provided for research and...

CVE-2026-0740-mass

CVE-2026-0740 — Mass-Target Exploit Engine Author: 0xNuts Contributor: Cursor Repository: https://github.com/ExDev994/CVE-2026-0740-mass PoC for CVE-2026-0740: Ninja Forms File Uploads = 3.3.26 — Unauthenticated Arbitrary File Upload which can lead to RCE. Original vulnerability discovered by Sél...

VulnCheck KEV: CVE-2026-94504

Ninja Forms 3.15.3 stores an anonymous non-RTE textarea value and renders it without safe HTML encoding in the legacy submission editor. An attacker can break out of the textarea with stored script. When an Administrator opens the attacker-known direct submission URL, the script runs in the...

ninja-form-exploit

ninja-form-exploit CVE-2026-0740 — Multi-threaded vulnerability scanner for the Ninja Forms File Upload path traversal issue on WordPress. Description main.py scans a list of WordPress targets to determine whether the Ninja Forms File Uploads plugin is vulnerable to CVE-2026-0740. Brief flow: 1...

CVE-2026-0740

CVE-2026-0740 🧩 개요 CVE-2026-0740 은 인증되지 않은 임의 파일 업로드 취약점으로, 다음에 영향을 미칩니다: Ninja Forms File Uploads ≤ 3.3.26 워드프레스 플러그인 이 결함은 공격자가 인증 없이 서버에 임의의 파일을 업로드할 수 있게 하여, 잠재적으로 원격 코드 실행RCE으로 이어질 수 있습니다. ⚠️ 면책 조항 이 프로젝트는 교육적 목적 및 공인된 보안 테스트 목적으로만 제공됩니다. 소유하지 않거나 명시적 테스트 허가를 받지 않은 시스템에 대해 사용하지 마십시오. 저자는 오용 또...

CVE-2026-92820

The Ninja Forms - File Uploads plugin for WordPress is vulnerable to arbitrary file operations in all versions up to, and including, 3.3.34 via the external Amazon S3 upload flow. The plugin trusts an attacker-supplied file path from the form submission and stores it as the upload's filepath, whi...

CVE-2026-90438

The Ninja Forms – The Contact Form Builder That Grows With You plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Paragraph Text RTE Field Submission in all versions up to, and including, 3.15.4 due to insufficient input sanitization and output escaping. This makes it possible...

CVE-2026-90438 Ninja Forms <= 3.15.4 - Unauthenticated Stored Cross-Site Scripting via Paragraph Text (RTE) Field Submission

The Ninja Forms – The Contact Form Builder That Grows With You plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Paragraph Text RTE Field Submission in all versions up to, and including, 3.15.4 due to insufficient input sanitization and output escaping. This makes it possible...

CVE-2026-90438 Ninja Forms <= 3.15.4 - Unauthenticated Stored Cross-Site Scripting via Paragraph Text (RTE) Field Submission

The Ninja Forms – The Contact Form Builder That Grows With You plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Paragraph Text RTE Field Submission in all versions up to, and including, 3.15.4 due to insufficient input sanitization and output escaping. This makes it possible...

EUVD-2026-91177

The Ninja Forms – The Contact Form Builder That Grows With You plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Paragraph Text RTE Field Submission in all versions up to, and including, 3.15.4 due to insufficient input sanitization and output escaping. This makes it possible...

CVE-2026-90438

The Ninja Forms plugin for WordPress is vulnerable to Stored Cross-Site Scripting (XSS) in all versions up to and including 3.15.4 . The root cause is insufficient input sanitization and output escaping within the Paragraph Text (RTE) Field Submission. This allows unauthenticated attackers to inj...