| Package | Affected versions | Patched versions |
|---|---|---|
| ninja forms | < 3.6.4 | 3.6.4 |
The Ninja Forms Contact Form WordPress plugin before 3.6.4 does not escape keys of the fields POST parameter, which could allow high privilege users to perform SQL injections attacks
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free