CVE-2016-1209

概要

参考情報

• jvn.jp/en/jp/JVN44657371/index.html · Vendor Advisory
• jvndb.jvn.jp/jvndb/JVNDB-2016-000064 · Vendor Advisory
• packetstormsecurity.com/files/137211/WordPress-Ninja-Forms-Unauthenticated-File-Upload.html · Exploit
• pritect.net/blog/ninja-forms-2-9-42-critical-security-vulnerabilities
• rapid7.com/db/modules/exploit/unix/webapp/wp_ninja_forms_unauthenticated_file_upload · Exploit
• ninjaforms.com/important-security-update-always-hurt-ones-love
• wordpress.org/plugins/ninja-forms/changelog
• wpvulndb.com/vulnerabilities/8485

ninja forms のその他の脆弱性

• CVE-2025-14072中 5.3The Ninja Forms WordPress plugin before 3.13.3 allows unauthenticated attackers to generate valid access tokens via the REST API which can …
• CVE-2025-11924高 7.5The Ninja Forms – The Contact Form Builder That Grows With You plugin for WordPress is vulnerable to Insecure Direct Object Reference in ver…
• CVE-2025-10499中 4.3The Ninja Forms – The Contact Form Builder That Grows With You plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versi…
• CVE-2025-10498中 5.4The Ninja Forms – The Contact Form Builder That Grows With You plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions …
• CVE-2025-9083緊急 9.8The Ninja Forms WordPress plugin before 3.11.1 unserializes user input via form field, which could allow Unauthenticated users to perform P…