Show filters
61 Total Results
Displaying 51-60 of 61
Sort by:
Attacker Value
Unknown
CVE-2017-18574
Disclosure Date: August 22, 2019 (last updated November 27, 2024)
The ninja-forms plugin before 3.0.31 for WordPress has insufficient HTML escaping in the builder.
0
Attacker Value
Unknown
CVE-2018-20981
Disclosure Date: August 22, 2019 (last updated November 27, 2024)
The ninja-forms plugin before 3.3.9 for WordPress has insufficient restrictions on submission-data retrieval during Export Personal Data requests.
0
Attacker Value
Unknown
CVE-2018-20980
Disclosure Date: August 22, 2019 (last updated November 27, 2024)
The ninja-forms plugin before 3.2.15 for WordPress has parameter tampering.
0
Attacker Value
Unknown
CVE-2019-10869
Disclosure Date: May 07, 2019 (last updated November 27, 2024)
Path Traversal and Unrestricted File Upload exists in the Ninja Forms plugin before 3.0.23 for WordPress (when the Uploads add-on is activated). This allows an attacker to traverse the file system to access files and execute code via the includes/fields/upload.php (aka upload/submit page) name and tmp_name parameters.
0
Attacker Value
Unknown
CVE-2018-19796
Disclosure Date: December 03, 2018 (last updated November 27, 2024)
An open redirect in the Ninja Forms plugin before 3.3.19.1 for WordPress allows Remote Attackers to redirect a user via the lib/StepProcessing/step-processing.php (aka submissions download page) redirect parameter.
0
Attacker Value
Unknown
CVE-2018-19287
Disclosure Date: November 15, 2018 (last updated November 27, 2024)
XSS in the Ninja Forms plugin before 3.3.18 for WordPress allows Remote Attackers to execute JavaScript via the includes/Admin/Menus/Submissions.php (aka submissions page) begin_date, end_date, or form_id parameter.
0
Attacker Value
Unknown
CVE-2018-16308
Disclosure Date: September 01, 2018 (last updated November 27, 2024)
The Ninja Forms plugin before 3.3.14.1 for WordPress allows CSV injection.
0
Attacker Value
Unknown
CVE-2018-7280
Disclosure Date: February 21, 2018 (last updated November 26, 2024)
The Ninja Forms plugin before 3.2.14 for WordPress has XSS.
0
Attacker Value
Unknown
CVE-2016-1209
Disclosure Date: May 14, 2016 (last updated November 25, 2024)
The Ninja Forms plugin before 2.9.42.1 for WordPress allows remote attackers to conduct PHP object injection attacks via crafted serialized values in a POST request.
0
Attacker Value
Unknown
CVE-2015-2220
Disclosure Date: March 05, 2015 (last updated October 05, 2023)
Multiple cross-site scripting (XSS) vulnerabilities in the Ninja Forms plugin before 2.8.9 for WordPress allow (1) remote attackers to inject arbitrary web script or HTML via the ninja_forms_field_1 parameter in a ninja_forms_ajax_submit action to wp-admin/admin-ajax.php or (2) remote administrators to inject arbitrary web script or HTML via the fields[1] parameter to wp-admin/post.php.
0
