CVE-2016-1209

Published: May 14, 2016

Modified: Aug 5, 2024

PUBLISHED

Description

The Ninja Forms plugin before 2.9.42.1 for WordPress allows remote attackers to conduct PHP object injection attacks via crafted serialized values in a POST request.

Vendor	Product	Versions
n/a	n/a	affected `n/a`

References

https://wordpress.org/plugins/ninja-forms/changelog/

x_refsource_CONFIRM

https://wpvulndb.com/vulnerabilities/8485

x_refsource_MISC

JVNDB-2016-000064

third-party-advisory

x_refsource_JVNDB

https://ninjaforms.com/important-security-update-always-hurt-ones-love/

x_refsource_CONFIRM

http://www.rapid7.com/db/modules/exploit/unix/webapp/wp_ninja_forms_unauthenticated_file_upload

x_refsource_MISC

http://packetstormsecurity.com/files/137211/WordPress-Ninja-Forms-Unauthenticated-File-Upload.html

x_refsource_MISC

JVN#44657371

third-party-advisory

x_refsource_JVN

http://www.pritect.net/blog/ninja-forms-2-9-42-critical-security-vulnerabilities

x_refsource_MISC

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Start Training

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.

Scan Now

CVE-2016-1209

Description

Affected Products

References