Skip to content
OpenAdvisories

Vendor

Ninja Forms

2 known vulnerabilities.

Products

Ninja Forms File Uploads Extension 1 Ninja Forms Webhooks 1
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Medium 5.5
    CVE-2024-13940

    Ninja Forms Webhooks <= 3.0.7 - Authenticated (Admin+) Server-Side Request Forgery via Form Webhook

    The Ninja Forms Webhooks plugin for WordPress is vulnerable to Server-Side Request Forgery in all versions up to, and including, 3.0.7 via the form webhook functionality. This makes it possible for authenticated attackers, with Administrator-level access and …

    Ninja Forms Ninja Forms Webhooks Web / CMS