Log out
Get PRO

Latest

Input validation vulnerability in Ninja Forms Contact Form – The Drag and Drop Form Builder for WordPress 3.6.25

  • Severity: medium-risk
  • Status: Fixed
  • Publication: July 25, 2023

The Ninja Forms plugin for WordPress is vulnerable to a security threat called Reflected Cross-Site Scripting. This issue affects versions of the plugin up to 3.6.25 and is caused by not properly protecting user input and output. Unauthenticated attackers can take advantage of this vulnerability by injecting malicious web scripts into pages. This can be done if they are able to get a user to take an action, such as clicking a link.

Detected in:

Ninja Forms – The Contact Form Builder That Grows With You fixed vulnerable versions:
Ninja Forms Contact Form – The Drag and Drop Form Builder for WordPress fixed vulnerable versions: >= * <= 3.6.25

This information is sourced from www.wpvulnerability.com. An open-source database of vulnerabilities maintained by the community. Help us out by submitting vulnerabilities!

Version compare shows which versions have a vulnerability. For example: >= 2.2.8 <= 2.2.21 means:

> from 2.2.8
= including 2.2.8 & 2.2.21
< to 2.2.21

  • Incorrect?

Is this information incorrect? Please leave us a message.