Get a demo
100% Signal 0% Noise Invicti Logo - The Largest Dynamic Application Security Solutions Provider In The World Get a demo
WordPress Plugin Ninja Forms Contact Form-The Drag and Drop Form Builder for WordPress PHP Code Injection - Vulnerability Database
WP Plugin Ninja Forms

WordPress Plugin Ninja Forms Contact Form-The Drag and Drop Form Builder for WordPress PHP Code Injection

Critical
Reference: No Reference
Title: WordPress Plugin Ninja Forms Contact Form-The Drag and Drop Form Builder for WordPress PHP Code Injection
Overview:

WordPress Plugin Ninja Forms Contact Form-The Drag and Drop Form Builder for WordPress is prone to a vulnerability that lets attackers inject and execute arbitrary code because the application fails to sanitize user-supplied input. Attackers can exploit this issue to execute arbitrary PHP code within the context of the affected webserver process. WordPress Plugin Ninja Forms Contact Form-The Drag and Drop Form Builder for WordPress versions 3.0-3.0.34.1 3.1-3.1.9 3.2-3.2.27 3.3-3.3.21.3 3.4-3.4.34.1 3.5-3.5.8.3 3.6-3.6.10 are vulnerable.