| Package | Affected versions | Patched versions |
|---|---|---|
| ninja forms | < 3.11.1 | 3.11.1 |
The Ninja Forms WordPress plugin before 3.11.1 unserializes user input via form field, which could allow Unauthenticated users to perform PHP Object Injection when a suitable gadget is present on the blog.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free