CVE-2018-16308

Description

References

• packetstormsecurity.com/files/148993/WordPress-Ninja-Forms-3.3.13-CSV-Injection.html · Exploit
• wordpress.org/plugins/ninja-forms · Third Party Advisory
• exploit-db.com/exploits/45234 · Exploit

Autres vulnérabilités de ninja forms

• CVE-2025-14072MOYENNE 5.3The Ninja Forms WordPress plugin before 3.13.3 allows unauthenticated attackers to generate valid access tokens via the REST API which can …
• CVE-2025-11924ÉLEVÉE 7.5The Ninja Forms – The Contact Form Builder That Grows With You plugin for WordPress is vulnerable to Insecure Direct Object Reference in ver…
• CVE-2025-10499MOYENNE 4.3The Ninja Forms – The Contact Form Builder That Grows With You plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versi…
• CVE-2025-10498MOYENNE 5.4The Ninja Forms – The Contact Form Builder That Grows With You plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions …
• CVE-2025-9083CRITIQUE 9.8The Ninja Forms WordPress plugin before 3.11.1 unserializes user input via form field, which could allow Unauthenticated users to perform P…