| Max CVSS | 7.5 | Min CVSS | 4.3 | Total Count | 2 |
| ID | CVSS | Summary | Last (major) update | Published | |
| CVE-2020-36175 | 5.0 |
The Ninja Forms plugin before 3.4.27.1 for WordPress allows attackers to bypass validation via the email field.
|
21-07-2021 - 11:39 | 06-01-2021 - 15:15 | |
| CVE-2020-36173 | 5.0 |
The Ninja Forms plugin before 3.4.28 for WordPress lacks escaping for submissions-table fields.
|
21-07-2021 - 11:39 | 06-01-2021 - 15:15 | |
| CVE-2020-36174 | 4.3 |
The Ninja Forms plugin before 3.4.27.1 for WordPress allows CSRF via services integration.
|
08-01-2021 - 19:46 | 06-01-2021 - 15:15 | |
| CVE-2018-16308 | 6.8 |
The Ninja Forms plugin before 3.3.14.1 for WordPress allows CSV injection.
|
24-08-2020 - 17:37 | 01-09-2018 - 18:29 | |
| CVE-2020-12462 | 4.3 |
The ninja-forms plugin before 3.4.24.2 for WordPress allows CSRF with resultant XSS.
|
06-05-2020 - 13:36 | 29-04-2020 - 17:15 | |
| CVE-2018-19796 | 5.8 |
An open redirect in the Ninja Forms plugin before 3.3.19.1 for WordPress allows Remote Attackers to redirect a user via the lib/StepProcessing/step-processing.php (aka submissions download page) redirect parameter.
|
03-03-2020 - 17:15 | 03-12-2018 - 06:29 | |
| CVE-2018-20981 | 6.4 |
The ninja-forms plugin before 3.3.9 for WordPress has insufficient restrictions on submission-data retrieval during Export Personal Data requests.
|
26-08-2019 - 16:44 | 22-08-2019 - 13:15 | |
| CVE-2018-20980 | 5.0 |
The ninja-forms plugin before 3.2.15 for WordPress has parameter tampering.
|
26-08-2019 - 16:41 | 22-08-2019 - 13:15 | |
| CVE-2017-18574 | 4.3 |
The ninja-forms plugin before 3.0.31 for WordPress has insufficient HTML escaping in the builder.
|
26-08-2019 - 16:36 | 22-08-2019 - 13:15 | |
| CVE-2019-15025 | 7.5 |
The ninja-forms plugin before 3.3.21.2 for WordPress has SQL injection in the search filter on the submissions page.
|
20-08-2019 - 15:11 | 14-08-2019 - 15:15 | |
| CVE-2018-19287 | 4.3 |
XSS in the Ninja Forms plugin before 3.3.18 for WordPress allows Remote Attackers to execute JavaScript via the includes/Admin/Menus/Submissions.php (aka submissions page) begin_date, end_date, or form_id parameter.
|
14-12-2018 - 21:10 | 15-11-2018 - 06:29 |