| CVE-2022-2903 |
The Ninja Forms Contact Form WordPress plugin before 3.6.13 unserialises the content of an imported file, which could…
|
7.2
Élevée
|
26 sept. 2022 |
| CVE-2021-25066 |
The Ninja Forms Contact Form WordPress plugin before 3.6.10 does not sanitize and escape some imported data, allowing…
|
Non notée
|
4 juil. 2022 |
| CVE-2021-25056 |
The Ninja Forms Contact Form WordPress plugin before 3.6.10 does not sanitise and escape field labels, allowing high…
|
Non notée
|
4 juil. 2022 |
| CVE-2021-24889 |
The Ninja Forms Contact Form WordPress plugin before 3.6.4 does not escape keys of the fields POST parameter, which…
|
Non notée
|
29 nov. 2021 |
| CVE-2021-24381 |
The Ninja Forms Contact Form WordPress plugin before 3.5.8.2 does not sanitise and escape the custom class name of the…
|
Non notée
|
25 oct. 2021 |
| CVE-2021-24166 |
The wp_ajax_nf_oauth_disconnect from the Ninja Forms Contact Form – The Drag and Drop Form Builder for WordPress…
|
Non notée
|
5 avr. 2021 |
| CVE-2021-24165 |
In the Ninja Forms Contact Form WordPress plugin before 3.4.34, the wp_ajax_nf_oauth_connect AJAX action was…
|
Non notée
|
5 avr. 2021 |
| CVE-2021-24164 |
In the Ninja Forms Contact Form WordPress plugin before 3.4.34.1, low-level users, such as subscribers, were able to…
|
Non notée
|
5 avr. 2021 |
| CVE-2021-24163 |
The AJAX action, wp_ajax_ninja_forms_sendwp_remote_install_handler, did not have a capability check on it, nor did it…
|
Non notée
|
5 avr. 2021 |