Log out
Get PRO

Latest

Input validation vulnerability in Ninja Forms Contact Form – The Drag and Drop Form Builder for WordPress 2.9.42

  • Severity: critical
  • Status: Fixed
  • Publication: May 5, 2016

Ninja Forms is a plugin used in websites to help create forms. Versions 2.9.36 to 2.9.42 of this plugin have a security flaw that allows people who are not signed in to the website to upload files with malicious code. This malicious code can be used to gain control of the website and take over the server. It is important to update the Ninja Forms plugin to a newer version to make sure your website is secure.

Detected in:

Ninja Forms – The Contact Form Builder That Grows With You fixed vulnerable versions:
Ninja Forms Contact Form – The Drag and Drop Form Builder for WordPress fixed vulnerable versions: >= 2.9.36 <= 2.9.42

This information is sourced from www.wpvulnerability.com. An open-source database of vulnerabilities maintained by the community. Help us out by submitting vulnerabilities!

Version compare shows which versions have a vulnerability. For example: >= 2.2.8 <= 2.2.21 means:

> from 2.2.8
= including 2.2.8 & 2.2.21
< to 2.2.21

  • Incorrect?

Is this information incorrect? Please leave us a message.