Login Request a demo
NF
Product
Ninja Forms File Uploads
by Ninjaforms · last CVE Sep 7, 2024
4
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Vulnerabilities4In the news0Timeline
Severity mix
Critical 1High 1Medium 2Low 0
Severity
All severities4Critical1High1Medium2Low0
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add Ninja Forms File Uploads to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2022-0888
9.8
39%
Mar 23
The Ninja Forms - File Uploads Extension WordPress plugin is vulnerable to arbitrary file uploads due to insufficient input file type validation found in the…
Affected: through 3.3.0
CVE-2019-10869
8.1
8%
May 7
Path Traversal and Unrestricted File Upload exists in the Ninja Forms plugin before 3.0.23 for WordPress (when the Uploads add-on is activated)
Affected: before 3.0.23
CVE-2024-1596
6.1
0%
Sep 7
Ninja Forms File Uploads <= 3.3.16 - Unauthenticated Stored Cross-Site Scripting via File Upload
Affected: before 3.3.18
CVE-2022-0889
6.1
1%
Mar 23
The Ninja Forms - File Uploads Extension WordPress plugin is vulnerable to reflected cross-site scripting due to missing sanitization of the files filename parameter found in the…
Affected: through 3.3.12
Showing 4