Lucene search
Ninja Forms < 3.5.8 - Unprotected REST-API to Email Injection
Ninja Forms < 3.5.8 - Unprotected REST-API to Email Injection. Arbitrary email sending via trigger_email_action in versions up to 3.5.7, allowing authenticated attackers to send emails via /ninja-forms-submissions/email-action REST API
Show more
| Reporter | Title | Published | Views | Family All 8 |
|---|---|---|---|---|
 | Ninja Forms < 3.5.8 - Unprotected REST-API to Email Injection | 22 Sep 202100:00 | – | wpexploit |
 | CVE-2021-34648 | 22 Sep 202118:15 | – | nvd |
 | WordPress Ninja Forms Contact Form plugin <= 3.5.7 - Unprotected REST-API to Email Injection vulnerability | 22 Sep 202100:00 | – | patchstack |
 | Code injection | 22 Sep 202118:15 | – | prion |
 | CVE-2021-34648 Ninja Forms <= 3.5.7 Unprotected REST-API to Email Injection | 22 Sep 202117:53 | – | cvelist |
 | CVE-2021-34648 | 22 Sep 202118:15 | – | cve |
 | Recently Patched Vulnerabilities in Ninja Forms Plugin Affect Over 1 Million Site Owners | 22 Sep 202115:00 | – | wordfence |
 | WordPress Ninja Forms Plugin < 3.5.8 Multiple Vulnerabilities | 12 Oct 202100:00 | – | openvas |
Node
Transform Your Security Services
Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.
Book a live demo22 Sep 2021 00:00Current
0.8Low risk
Vulners AI Score0.8
EPSS0.001