CVE-2014-9688: ninjaforms ninja forms – CVSS 7.5

パッケージ	影響を受けるバージョン	修正済みバージョン
ninja forms ninjaforms	`≤ 2.8.9`	修正版なし

概要

Unspecified vulnerability in the Ninja Forms plugin before 2.8.10 for WordPress has unknown impact and remote attack vectors related to admin users.

CVE-2025-14072中 5.3The Ninja Forms WordPress plugin before 3.13.3 allows unauthenticated attackers to generate valid access tokens via the REST API which can …
CVE-2025-11924高 7.5The Ninja Forms – The Contact Form Builder That Grows With You plugin for WordPress is vulnerable to Insecure Direct Object Reference in ver…
CVE-2025-10499中 4.3The Ninja Forms – The Contact Form Builder That Grows With You plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versi…
CVE-2025-10498中 5.4The Ninja Forms – The Contact Form Builder That Grows With You plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions …
CVE-2025-9083緊急 9.8The Ninja Forms WordPress plugin before 3.11.1 unserializes user input via form field, which could allow Unauthenticated users to perform P…