CVE-2021-24166

Mô tả

Tham khảo

• wpscan.com/vulnerability/b531fb65-a8ff-4150-a9a1-2a62a3c00bd6 · Exploit
• wordfence.com/blog/2021/02/one-million-sites-affected-four-severe-vulnerabilities-patched-in-ninja-forms · Third Party Advisory

Lỗ hổng khác của ninja forms

• CVE-2025-14072TRUNG BÌNH 5.3The Ninja Forms WordPress plugin before 3.13.3 allows unauthenticated attackers to generate valid access tokens via the REST API which can …
• CVE-2025-11924CAO 7.5The Ninja Forms – The Contact Form Builder That Grows With You plugin for WordPress is vulnerable to Insecure Direct Object Reference in ver…
• CVE-2025-10499TRUNG BÌNH 4.3The Ninja Forms – The Contact Form Builder That Grows With You plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versi…
• CVE-2025-10498TRUNG BÌNH 5.4The Ninja Forms – The Contact Form Builder That Grows With You plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions …
• CVE-2025-9083NGHIÊM TRỌNG 9.8The Ninja Forms WordPress plugin before 3.11.1 unserializes user input via form field, which could allow Unauthenticated users to perform P…