Lucene search
+L

1789 matches found

CVE
CVE
added 2026/03/03 9:24 a.m.38 views

CVE-2026-2568

CVE-2026-2568 is an authenticated storage-XSS in the WordPress plugin pair “WP Zendesk for Contact Form 7, WPForms, Elementor, Formidable and Ninja Forms” (slug cf7-zendesk) affecting versions up to 1.1.5. Public sources (Wordfence) confirm this is a stored XSS via form submission data, with CVSS...

7.2CVSS6AI score0.00235EPSS
SaveExploits0References2
Patchstack
Patchstack
added 2026/03/03 8:44 a.m.24 views

WordPress WP Zendesk for Contact Form 7, WPForms, Elementor, Formidable and Ninja Forms plugin <= 1.1.5 - Unauthenticated Stored Cross-Site Scripting vulnerability

Unauthenticated Stored Cross-Site Scripting vulnerability discovered by Nabil Irawan - Heroes Cyber Security in WordPress Plugin WP Zendesk for Contact Form 7, WPForms, Elementor, Formidable and Ninja Forms versions = 1.1.5...

7.2CVSS5.9AI score0.00235EPSS
SaveExploits0References1Affected Software1
RedhatCVE
RedhatCVE
added 2026/02/20 1:27 p.m.14 views

CVE-2026-25008

Insertion of Sensitive Information Into Sent Data vulnerability in Shahjahan Jewel Ninja Tables ninja-tables allows Retrieve Embedded Sensitive Data.This issue affects Ninja Tables: from n/a through = 5.2.5...

4.3CVSS5.5AI score0.00215EPSS
SaveExploits0References1
NVD
NVD
added 2026/02/19 9:16 a.m.9 views

CVE-2026-25008

Insertion of Sensitive Information Into Sent Data vulnerability in Shahjahan Jewel Ninja Tables ninja-tables allows Retrieve Embedded Sensitive Data.This issue affects Ninja Tables: from n/a through = 5.2.5...

4.3CVSS0.00215EPSS
SaveExploits0References1
ATTACKERKB
ATTACKERKB
added 2026/02/19 8:26 a.m.7 views

CVE-2026-25008

Insertion of Sensitive Information Into Sent Data vulnerability in Shahjahan Jewel Ninja Tables ninja-tables allows Retrieve Embedded Sensitive Data.This issue affects Ninja Tables: from n/a through = 5.2.5...

5.5AI score0.00215EPSS
SaveExploits0References2
CVE
CVE
added 2026/02/19 8:26 a.m.26 views

CVE-2026-25008

The CVE-2026-25008 entry concerns WordPress Ninja Tables (ninja-tables) versions up to and including 5.2.5. The issue is described as an Insertion of Sensitive Information Into Sent Data vulnerability that enables retrieval of embedded sensitive data from Ninja Tables. All connected sources consi...

4.3CVSS5.4AI score0.00215EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2026/02/19 8:26 a.m.5 views

CVE-2026-25008 WordPress Ninja Tables plugin <= 5.2.5 - Sensitive Data Exposure vulnerability

Insertion of Sensitive Information Into Sent Data vulnerability in Shahjahan Jewel Ninja Tables ninja-tables allows Retrieve Embedded Sensitive Data.This issue affects Ninja Tables: from n/a through = 5.2.5...

4.3CVSS5.5AI score0.00215EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2026/02/19 8:26 a.m.38 views

CVE-2026-25008 WordPress Ninja Tables plugin <= 5.2.5 - Sensitive Data Exposure vulnerability

Insertion of Sensitive Information Into Sent Data vulnerability in Shahjahan Jewel Ninja Tables ninja-tables allows Retrieve Embedded Sensitive Data.This issue affects Ninja Tables: from n/a through = 5.2.5...

4.3CVSS0.00215EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2026/02/19 12:00 a.m.17 views

PT-2026-20678

Insertion of Sensitive Information Into Sent Data vulnerability in Shahjahan Jewel Ninja Tables ninja-tables allows Retrieve Embedded Sensitive Data.This issue affects Ninja Tables: from n/a through = 5.2.5...

5.5AI score0.00215EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2026/02/19 12:00 a.m.18 views

WordPress plugin Ninja Tables 安全漏洞

WordPress and WordPress plugins are both products of the WordPress Foundation. WordPress is a blog platform developed using the PHP language. This platform allows for the creation of personal blog websites on servers based on PHP and MySQL. A WordPress plugin is an application that can be install...

4.3CVSS5.8AI score0.00215EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2026/02/11 1:16 p.m.13 views

CVE-2026-2268

The Ninja Forms plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 3.14.0. This is due to the unsafe application of the ninjaformsmergetags filter to user-supplied input within repeater fields, which allows the resolution of postmeta:KEY mer...

7.5CVSS5.7AI score0.00344EPSS
SaveExploits2References1
NVD
NVD
added 2026/02/10 10:16 a.m.19 views

CVE-2026-2268

The Ninja Forms plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 3.14.0. This is due to the unsafe application of the ninjaformsmergetags filter to user-supplied input within repeater fields, which allows the resolution of postmeta:KEY mer...

7.5CVSS0.00344EPSS
SaveExploits2References5
ATTACKERKB
ATTACKERKB
added 2026/02/10 9:26 a.m.8 views

CVE-2026-2268

The Ninja Forms plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 3.14.0. This is due to the unsafe application of the ninjaformsmergetags filter to user-supplied input within repeater fields, which allows the resolution of postmeta:KEY mer...

7.5CVSS5.7AI score0.00344EPSS
SaveExploits2References6
Vulnrichment
Vulnrichment
added 2026/02/10 9:26 a.m.7 views

CVE-2026-2268 Ninja Forms <= 3.14.0 - Unauthenticated Information Disclosure in nf_ajax_submit AJAX Action

The Ninja Forms plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 3.14.0. This is due to the unsafe application of the ninjaformsmergetags filter to user-supplied input within repeater fields, which allows the resolution of postmeta:KEY mer...

7.5CVSS5.7AI score0.00344EPSS
SaveExploits2References5
Cvelist
Cvelist
added 2026/02/10 9:26 a.m.43 views

CVE-2026-2268 Ninja Forms <= 3.14.0 - Unauthenticated Information Disclosure in nf_ajax_submit AJAX Action

The Ninja Forms plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 3.14.0. This is due to the unsafe application of the ninjaformsmergetags filter to user-supplied input within repeater fields, which allows the resolution of postmeta:KEY mer...

7.5CVSS0.00344EPSS
SaveExploits2References5
Patchstack
Patchstack
added 2026/02/10 7:07 a.m.15 views

WordPress Ninja Forms plugin <= 3.14.0 - Unauthenticated Information Disclosure in nf_ajax_submit AJAX Action vulnerability

Unauthenticated Information Disclosure in nfajaxsubmit AJAX Action vulnerability discovered by johska in WordPress Plugin Ninja Forms versions = 3.14.0...

7.5CVSS5.5AI score0.00344EPSS
SaveExploits2References1Affected Software1
Positive Technologies
Positive Technologies
added 2026/02/10 12:00 a.m.20 views

PT-2026-7248

The Ninja Forms plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 3.14.0. This is due to the unsafe application of the ninja forms merge tags filter to user-supplied input within repeater fields, which allows the resolution of post meta:KEY...

7.5CVSS5.7AI score0.00344EPSS
SaveExploits2References7
CNNVD
CNNVD
added 2026/02/10 12:00 a.m.17 views

WordPress plugin Ninja Forms 信息泄露漏洞

WordPress and WordPress plugins are both products of the WordPress Foundation. WordPress is a blog platform developed using the PHP language. This platform allows for the creation of personal blog websites on servers based on PHP and MySQL. A WordPress plugin is an application that can be install...

7.5CVSS5.8AI score0.00344EPSS
SaveExploits2References6
RedhatCVE
RedhatCVE
added 2026/01/23 9:16 p.m.14 views

CVE-2025-68073

Missing Authorization vulnerability in Ninja Team GDPR CCPA Compliance Support ninja-gdpr-compliance allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects GDPR CCPA Compliance Support: from n/a through = 2.7.4...

6.5CVSS5.4AI score0.00286EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2026/01/22 12:00 a.m.27 views

PT-2026-4076

Name of the Vulnerable Software and Affected Versions Ninja Team GDPR CCPA Compliance Support versions through 2.7.4 Description A missing authorization issue exists in Ninja Team GDPR CCPA Compliance Support ninja-gdpr-compliance, allowing exploitation of incorrectly configured access control...

5.3AI score0.00286EPSS
SaveExploits0References3
Rows per page
Query Builder