High
CVE-2024-1596
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 112
Reset filters
Medium
CVE-2024-43999
Ninja Forms <= 3.8.11 - Authenticated (Administrator+) Stored Cross-Site Scripting
Medium
CVE-2024-7354
Ninja Forms – The Contact Form Builder That Grows With You <= 3.8.10 - Reflected Cross-Site Scripting
Medium
CVE-2024-39628
Ninja Forms <= 3.8.6 - Cross-Site Request Forgery
Medium
CVE-2024-37934
Ninja Forms <= 3.8.4 - Authenticated (Subscriber+) Arbitrary Shortcode Execution
Medium
CVE-2024-29220
Ninja Forms – The Contact Form Builder That Grows With You <= 3.8.0 - Authenticated (Admin+) Stored Cross-Site Scripting
Medium
CVE-2024-26019
Ninja Forms – The Contact Form Builder That Grows With You <= 3.8.0 - Authenticated (Admin+) Stored Cross-Site Scripting
Medium
CVE-2024-2108
Ninja Forms Contact Form – The Drag and Drop Form Builder for WordPress <= 3.8.0 - Authenticated (Author+) Stored Cross-Site Scripting
Medium
CVE-2024-2113
Ninja Forms Contact Form – The Drag and Drop Form Builder for WordPress <= 3.8.0 - Cross-Site Request Forgery to Publicly Accessible Form Submission Export
Medium
CVE-2024-0685
Ninja Forms Contact Form <= 3.7.1 - Unauthenticated Second Order SQL Injection
Medium
CVE-2023-5530
Ninja Forms Contact Form <= 3.6.33 - Authenticated (Admin+) Stored Cross-Site Scripting
Medium
CVE-2023-4109
Ninja Forms <= 3.6.25 - Authenticated (Administrator+) Stored HTML Injection
Medium
CVE-2023-38393
Ninja Forms <= 3.6.25 - Missing Authorization to Form Submission Export
Medium
CVE-2023-38386
Ninja Forms <= 3.6.25 - Missing Authorization to Contributor+ Form Submission Export
Medium
CVE-2023-37979
Ninja Forms <= 3.6.25 - Reflected Cross-Site Scripting via 'data'
Medium
CVE-2023-33999
Freemius SDK <= 2.5.9 - Reflected Cross-Site Scripting via fs_request_get
Medium
CVE-2023-35909
Ninja Forms <= 3.6.25 - Denial of Service via Large Form Submissions
Medium
CVE-2023-36505
Ninja Forms <= 3.6.24 - Authenticated (Admin+) Arbitrary File Deletion
High
CVE-2023-2333
Ninja Forms Google Sheet Connector <= 1.2.6 - Reflected Cross-Site Scripting
Medium
CVE-2023-1835
Ninja Forms Contact Form <= 3.6.21 - Reflected Cross-Site Scripting via 'title'
High
CVE-2022-2903
Ninja Forms Contact Form – The Drag and Drop Form Builder for WordPress <= 3.6.12 - Authenticated (Administrator+) PHP Objection Injection
Critical
df46b3d5-a433-47b5-99b8-117591f7dd16
Ninja Forms Contact Form – The Drag and Drop Form Builder for WordPress <= 3.6.10 - Code Injection
Medium
CVE-2021-25056
Ninja Forms Contact Form <= 3.6.9 - Cross-Site Scripting via field label
Medium
CVE-2021-25066
Ninja Ninja Forms Contact Form <= 3.6.10 - Authenticated (Admin+) Stored Cross-Site Scripting via import
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.