İçeriğe atla
Noroxi

ninjaforms kayıtları

ninjaforms üreticisine ait 64 yayımlanmış kayıt.

Araştırmacı profili

KEV’e giren
0 · %0
Silahlaştırılmış
1 · %1,6
Pre-auth RCE
2
Düzeltme kaydı olan
%26,6
Yayından KEV’e ortanca
KEV’e giren kayıt yok

Yıllara göre kayıt

  1. 18
  2. 19
  3. 20
  4. 21
  5. 22
  6. 23
  7. 24
  8. 25
  9. 26

Çubuk: toplam · koyu kısım: CISA KEV.

Tekrar eden sınıflar

Bu üreticide en sık görülen zafiyet sınıfları: nereye bakmalı.

CWE

Saldırı profili

Tüm kayıtlar

64 kayıt
  • CVE-2016-1209
    57Planlayın

    The Ninja Forms plugin before 2.9.42.1 for WordPress allows remote attackers to conduct PHP object injection attacks via crafted serialized

    KritikCVSS 9,8SilahlaştırılmışEPSS %62

    ninjaforms · ninja forms14 May 2016

  • CVE-2022-0888
    51Planlayın

    Ninja Forms - File Uploads Extension <= 3.3.0 - Arbitrary File Upload

    KritikCVSS 9,8İstismar yokEPSS %39

    ninjaforms · ninja forms file uploads23 Mar 2022

  • CVE-2019-15025
    40Planlayın

    The ninja-forms plugin before 3.3.21.2 for WordPress has SQL injection in the search filter on the submissions page.

    KritikCVSS 9,8İstismar yokEPSS %2

    ninjaforms · ninjaforms14 Ağu 2019

  • CVE-2024-0685
    39İzleyin

    Ninja Forms Contact Form <= 3.7.1 - Unauthenticated Second Order SQL Injection

    KritikCVSS 9,8İstismar yokEPSS %1

    ninjaforms · ninja forms2 Şub 2024

  • CVE-2025-9083
    39İzleyin

    Ninja-forms < 3.11.1 - Unauthenticated PHP Objection

    KritikCVSS 9,8İstismar yokEPSS %1

    ninjaforms · ninja forms18 Eyl 2025

  • CVE-2023-38386
    39İzleyin

    WordPress Ninja Forms plugin <= 3.6.25 - Contributor+ Broken Access Control vulnerability

    KritikCVSS 9,8İstismar yokEPSS %0

    ninjaforms · ninja forms19 Haz 2024

  • CVE-2024-37934
    39İzleyin

    WordPress Ninja Forms plugin <= 3.8.4 - Subscriber+ Arbitrary Shortcode Execution vulnerability

    KritikCVSS 9,8İstismar yokEPSS %0

    ninjaforms · ninja forms9 Tem 2024

  • CVE-2018-20981
    37İzleyin

    The ninja-forms plugin before 3.3.9 for WordPress has insufficient restrictions on submission-data retrieval during Export Personal Data req

    KritikCVSS 9,1İstismar yokEPSS %2

    ninjaforms · ninja forms22 Ağu 2019

  • CVE-2018-16308
    35İzleyin

    The Ninja Forms plugin before 3.3.14.1 for WordPress allows CSV injection.

    YüksekCVSS 8,6İstismar yokEPSS %2

    ninjaforms · ninja forms1 Eyl 2018

  • CVE-2021-24163
    35İzleyin

    Ninja Forms < 3.4.34 - Authenticated SendWP Plugin Installation and Client Secret Key Disclosure

    YüksekCVSS 8,8İstismar yokEPSS %1

    ninjaforms · ninja forms5 Nis 2021

  • CVE-2023-38393
    35İzleyin

    WordPress Ninja Forms plugin <= 3.6.25 - Subscriber+ Broken Access Control vulnerability

    YüksekCVSS 8,8İstismar yokEPSS %1

    ninjaforms · ninja forms19 Haz 2024

  • CVE-2024-25572
    35İzleyin

    Cross-site request forgery (CSRF) vulnerability exists in Ninja Forms prior to 3.4.31.

    YüksekCVSS 8,8İstismar yokEPSS %0

    ninjaforms · ninja forms10 Nis 2024

  • CVE-2024-39628
    35İzleyin

    WordPress Ninja Forms plugin <= 3.8.6 - Cross Site Request Forgery (CSRF) vulnerability

    YüksekCVSS 8,8İstismar yokEPSS %0

    ninjaforms · ninja forms26 Ağu 2024

  • CVE-2019-10869
    34İzleyin

    Path Traversal and Unrestricted File Upload exists in the Ninja Forms plugin before 3.0.23 for WordPress (when the Uploads add-on is activat

    YüksekCVSS 8,1Kavram kanıtıEPSS %8

    ninjaforms · ninja forms file uploads7 May 2019

  • CVE-2014-9688
    31İzleyin

    Unspecified vulnerability in the Ninja Forms plugin before 2.8.10 for WordPress has unknown impact and remote attack vectors related to admi

    YüksekCVSS 7,5İstismar yokEPSS %2

    ninjaforms · ninja forms5 Mar 2015

  • CVE-2018-20980
    30İzleyin

    The ninja-forms plugin before 3.2.15 for WordPress has parameter tampering.

    YüksekCVSS 7,5İstismar yokEPSS %1

    ninjaforms · ninja forms22 Ağu 2019

  • CVE-2025-11924
    30İzleyin

    Ninja Forms – The Contact Form Builder That Grows With You <= 3.13.2 - Insecure Direct Object Reference to Unauthenticated Sensitive Information Exposure via Un

    YüksekCVSS 7,5İstismar yokEPSS %0

    ninjaforms · ninja forms17 Ara 2025

  • CVE-2022-2903
    28İzleyin

    NinjaForms < 3.6.13 - Admin+ PHP Objection Injection

    YüksekCVSS 7,2İstismar yokEPSS %1

    ninjaforms · ninja forms26 Eyl 2022

  • CVE-2021-24889
    28İzleyin

    Ninja Forms < 3.6.4 - Admin+ SQL Injection

    YüksekCVSS 7,2İstismar yokEPSS %1

    ninjaforms · ninja forms29 Kas 2021

  • CVE-2023-36505
    28İzleyin

    WordPress Ninja Forms Plugin <= 3.6.24 is vulnerable to Arbitrary File Deletion

    YüksekCVSS 7,2İstismar yokEPSS %1

    ninjaforms · ninja forms17 Nis 2024

  • CVE-2023-37979
    27İzleyin

    WordPress Ninja Forms Plugin <= 3.6.25 is vulnerable to Cross Site Scripting (XSS)

    OrtaCVSS 6,1Kavram kanıtıEPSS %10

    ninjaforms · ninja forms27 Tem 2023

  • CVE-2021-34647
    26İzleyin

    Ninja Forms <= 3.5.7 Sensitive Information Disclosure

    OrtaCVSS 6,5İstismar yokEPSS %1

    ninjaforms · ninja forms22 Eyl 2021

  • CVE-2020-36174
    26İzleyin

    The Ninja Forms plugin before 3.4.27.1 for WordPress allows CSRF via services integration.

    OrtaCVSS 6,5İstismar yokEPSS %1

    ninjaforms · ninja forms6 Oca 2021

  • CVE-2024-12238
    25İzleyin

    Ninja Forms – The Contact Form Builder That Grows With You <= 3.8.22 - Authenticated (Subscriber+) Arbitrary Shortcode Execution

    OrtaCVSS 6,3İstismar yokEPSS %0

    ninjaforms · ninja forms29 Ara 2024

  • CVE-2021-24165
    24İzleyin

    Ninja Forms < 3.4.34 - Administrator Open Redirect

    OrtaCVSS 6,1Kavram kanıtıEPSS %2

    ninjaforms · ninja forms5 Nis 2021