Medium
CVE-2021-36827
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 112
Reset filters
High
488970f0-3120-4f4a-9915-2ae1708bd86a
Ninja Forms Contact Form – The Drag and Drop Form Builder for WordPress <= 3.6.9 - Cross-Site Request Forgery to Field Import and PHP Object Injection
Medium
cda2465e-b17e-4b5c-ad86-3c3c7a354d03
Ninja Forms Contact Form – The Drag and Drop Form Builder for WordPress <= 3.6.7 - Email Address Disclosure
High
CVE-2022-0889
Ninja Forms - File Uploads Extension <= 3.3.12 - Reflected Cross-Site Scripting
High
CVE-2021-24889
Ninja Forms Contact Form <= 3.6.3 - Authenticated SQL Injection
Medium
CVE-2021-24381
Ninja Forms <= 3.5.8.1 - Cross-Site Scripting
Medium
CVE-2021-34648
Ninja Forms <= 3.5.7 - Unprotected REST-API to Email Injection
Medium
CVE-2021-34647
Ninja Forms <= 3.5.7 - Unprotected REST-API to Sensitive Information Disclosure
Medium
CVE-2021-24166
Ninja Forms Contact Form <= 3.4.33 - Cross-Site Request Forgery to OAuth Service Disconnection
Medium
CVE-2021-24164
Ninja Forms <= 3.4.34 - Authenticated OAuth Connection Key Disclosure
High
CVE-2021-24163
Ninja Forms Contact Form <= 3.4.33 - Authenticated SendWP Plugin Installation and Client Secret Key Disclosure
Medium
CVE-2021-24165
Ninja Forms Contact Form <= 3.4.33 - Administrator Open Redirect
High
CVE-2020-36174
Ninja Forms Contact Form – The Drag and Drop Form Builder for WordPress <= 3.4.27 - Cross-Site Request Forgery to Plugin Installation
Medium
CVE-2020-36175
Ninja Forms Contact Form – The Drag and Drop Form Builder for WordPress <= 3.4.27 - Validation Bypass via Email Field
Medium
CVE-2020-36173
Ninja Forms Contact Form – The Drag and Drop Form Builder for WordPress <= 3.4.27.1 - Stored Cross-Site Scripting
Medium
CVE-2020-12462
Ninja Forms Contact Form <= 3.4.24.1 - Cross-Site Request Forgery leading to Stored Cross-Site Scripting
Critical
CVE-2022-0888
Ninja Forms - File Uploads Extension <= 3.3.0 - Arbitrary File Upload
Medium
CVE-2020-8594
Ninja Forms Contact Form <= 3.4.22 - Stored Cross-Site Scripting
High
CVE-2019-10869
Ninja Forms - File Uploads <= 3.0.22 - Unauthenticated Arbitrary File Upload
Critical
CVE-2019-15025
Ninja Forms Contact Form <= 3.3.21.1 - SQL Injection
Medium
CVE-2018-19796
Ninja Forms Contact Form <= 3.3.19 - Authenticated Open Redirect
Medium
CVE-2018-19287
Ninja Forms Contact Form <= 3.3.17 - Cross-Site Scripting via begin_date, end_date, or form_id Parameter
High
aa735320-f7fe-4e51-9f9a-f4c8f3ddc2e7
Ninja Forms Contact Form – The Drag and Drop Form Builder for WordPress <= 3.3.13 - Cross-Site Scripting
High
CVE-2018-16308
Ninja Forms Contact Form <= 3.3.13 - CSV Injection
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.