1789 matches found
CVE-2022-27861
Unauth. Open Redirect vulnerability in Arscode Ninja Popups plugin = 4.7.5 versions...
CVE-2022-27861
Unauth. Open Redirect vulnerability in Arscode Ninja Popups plugin = 4.7.5 versions...
CVE-2022-27861
Unauth. Open Redirect vulnerability in Arscode Ninja Popups plugin = 4.7.5 versions...
Open redirect
Unauth. Open Redirect vulnerability in Arscode Ninja Popups plugin = 4.7.5 versions...
CVE-2022-27861
CVE-2022-27861 affects the WordPress plugin Arscode Ninja Popups (versions
CVE-2022-27861 WordPress Ninja Popups Plugin <= 4.7.5 is vulnerable to Open Redirection
Unauth. Open Redirect vulnerability in Arscode Ninja Popups plugin = 4.7.5 versions...
CVE-2022-27861 WordPress Ninja Popups Plugin <= 4.7.5 is vulnerable to Open Redirection
Unauth. Open Redirect vulnerability in Arscode Ninja Popups plugin = 4.7.5 versions...
Ninja Popups <= 4.7.5 - Unauthenticated Open Redirect
Description The plugin does not properly validate a redirect url, allowing unauthenticated attackers to redirect users to potentially malicious sites by clicking a link...
WordPress Plugin Arscode Ninja Popups Input Validation Error Vulnerability
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. An input validation error...
Ninja Forms < 3.6.26 - Admin+ Stored HTML Injection
Description The plugin does not sanitize and escape its label fields, which could allow high privilege users such as admin to perform Stored HTML injection. Only users with the unfilteredhtml capability can perform this, and such users are already allowed to use JS in posts/comments etc however t...
Ninja Forms < 3.6.26 - Admin+ Stored HTML Injection
Description The plugin does not sanitize and escape its label fields, which could allow high privilege users such as admin to perform Stored HTML injection. Only users with the unfilteredhtml capability can perform this, and such users are already allowed to use JS in posts/comments etc however t...
Ninja Forms Plugin for WordPress < 3.6.26 Multiple Vulnerabilities
The WordPress Ninja Forms Plugin installed on the remote host is affected by multiple vulnerabilities. Note that the scanner has not tested for these issues but has instead relied only on the application's self-reported version number. No source data...
Exploit for Cross-site Scripting in Ninjaforms Ninja_Forms
CVE-2023-37979 Unauth. Reflected Cross-Site...
WordPress Ninja Forms 3.6.25 Plugin - Reflected XSS Exploit
Exploit Title: WordPress Plugin Ninja Forms 3.6.25 - Reflected XSS Authenticated Google Dork: inurl:/wp-content/plugins/ninja-forms/readme.txt Exploit Author: Mehran Seifalinia Vendor Homepage: https://ninjaforms.com/ Software Link: https://downloads.wordpress.org/plugin/ninja-forms.3.6.25.zip...
WordPress Ninja Forms 3.6.25 Cross Site Scripting
Exploit Title: WordPress Plugin Ninja Forms 3.6.25 - Reflected XSS Authenticated Google Dork: inurl:/wp-content/plugins/ninja-forms/readme.txt Date: 2023-07-27 Exploit Author: Mehran Seifalinia Vendor Homepage: https://ninjaforms.com/ Software Link:...
WordPress Plugin Ninja Forms 3.6.25 - Reflected XSS
Exploit Title: WordPress Plugin Ninja Forms 3.6.25 - Reflected XSS Authenticated Google Dork: inurl:/wp-content/plugins/ninja-forms/readme.txt Date: 2023-07-27 Exploit Author: Mehran Seifalinia Vendor Homepage: https://ninjaforms.com/ Software Link:...
Exploit for Cross-site Scripting in Ninjaforms Ninja_Forms
CVE-2023-37979 Exploit !Python Versionhttps://img.shields...
Exploit for Cross-site Scripting in Ninjaforms Ninja_Forms
CVE-2023-37979 Exploit !Python Versionhttps://img.shields...
Multiple Flaws Found in Ninja Forms Plugin Leave 800,000 Sites Vulnerable
Multiple security vulnerabilities have been disclosed in the Ninja Forms plugin for WordPress that could be exploited by threat actors to escalate privileges and steal sensitive data. The flaws, tracked as CVE-2023-37979, CVE-2023-38386, and CVE-2023-38393, impact versions 3.6.25 and below,...
PT-2023-26395 · Saturday Drive · Ninja Forms
Name of the Vulnerable Software and Affected Versions: Ninja Forms versions 3.6.25 and earlier Description: The issue is related to a Missing Authorization vulnerability in Saturday Drive Ninja Forms. Recommendations: For versions 3.6.25 and earlier, update to a version later than 3.6.25 to resol...