3 matches found
VulnCheck KEV: CVE-2021-34648
The Ninja Forms WordPress plugin is vulnerable to arbitrary email sending via the triggeremailaction function found in the /includes/Routes/Submissions.php file, in versions up to and including 3.5.7. This allows authenticated attackers to send arbitrary emails from the affected server via the...
6.4CVSS5.8AI score0.00657EPSS
SaveExploits2References1
20