Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1000 CNY

100.0%
Buy Us a Coffee

Ninja Forms Contact Form – The Drag and Drop Form Builder for WordPress — Vulnerabilities & Security Advisories 10

All 10 CVE vulnerabilities found in Ninja Forms Contact Form – The Drag and Drop Form Builder for WordPress, with AI-generated Chinese analysis, references, and POCs.

Vendor: Unknown

CVE IDTitleCVSSSeverityPublished
CVE-2023-35909 WordPress Ninja Forms Plugin <= 3.6.25 is vulnerable to Denial of Service Attack CWE-400 5.3 Medium2023-12-07
CVE-2022-2903 NinjaForms < 3.6.13 - Admin+ PHP Objection Injection CWE-502 7.2 -2022-09-26
CVE-2021-25066 Ninja Forms < 3.6.10 - Admin+ Stored Cross-Site Scripting via Import CWE-79 4.8 -2022-07-04
CVE-2021-25056 Ninja Forms < 3.6.10 - Admin+ Stored Cross-Site Scripting CWE-79 4.8 -2022-07-04
CVE-2021-24889 Ninja Forms < 3.6.4 - Admin+ SQL Injection CWE-89 7.2 -2021-11-29
CVE-2021-24381 NinjaForms < 3.5.8.2 - Admin+ Stored Cross-Site Scripting CWE-79 4.8 -2021-10-25
CVE-2021-24163 Ninja Forms < 3.4.34 - Authenticated SendWP Plugin Installation and Client Secret Key Disclosure CWE-200 8.8 -2021-04-05
CVE-2021-24164 Ninja Forms < 3.4.34.1 - Authenticated OAuth Connection Key Disclosure CWE-200 4.3 -2021-04-05
CVE-2021-24165 Ninja Forms < 3.4.34 - Administrator Open Redirect CWE-601 6.1 -2021-04-05
CVE-2021-24166 Ninja Forms < 3.4.34 - CSRF to OAuth Service Disconnection CWE-352 5.4 -2021-04-05

All 10 known CVE vulnerabilities affecting Ninja Forms Contact Form – The Drag and Drop Form Builder for WordPress with full Chinese analysis, references, and POCs where available.