Media
CVE-2021-36827
Archivo de vulnerabilidades
Conoce las vulnerabilidades. Protege tus aplicaciones.
Descubre qué vulnerabilidades afectan a tus tecnologías y cómo solucionarlas. Encuentra explicaciones claras, versiones afectadas y recomendaciones prácticas - desde CMS y plugins hasta bibliotecas de aplicaciones.
Archivo de vulnerabilidades 112
Restablecer filtros
Alta
488970f0-3120-4f4a-9915-2ae1708bd86a
Ninja Forms Contact Form – The Drag and Drop Form Builder for WordPress <= 3.6.9 - Cross-Site Request Forgery to Field Import and PHP Object Injection
Media
cda2465e-b17e-4b5c-ad86-3c3c7a354d03
Ninja Forms Contact Form – The Drag and Drop Form Builder for WordPress <= 3.6.7 - Email Address Disclosure
Alta
CVE-2022-0889
Ninja Forms - File Uploads Extension <= 3.3.12 - Reflected Cross-Site Scripting
Alta
CVE-2021-24889
Ninja Forms Contact Form <= 3.6.3 - Authenticated SQL Injection
Media
CVE-2021-24381
Ninja Forms <= 3.5.8.1 - Cross-Site Scripting
Media
CVE-2021-34648
Ninja Forms <= 3.5.7 - Unprotected REST-API to Email Injection
Media
CVE-2021-34647
Ninja Forms <= 3.5.7 - Unprotected REST-API to Sensitive Information Disclosure
Media
CVE-2021-24166
Ninja Forms Contact Form <= 3.4.33 - Cross-Site Request Forgery to OAuth Service Disconnection
Media
CVE-2021-24164
Ninja Forms <= 3.4.34 - Authenticated OAuth Connection Key Disclosure
Alta
CVE-2021-24163
Ninja Forms Contact Form <= 3.4.33 - Authenticated SendWP Plugin Installation and Client Secret Key Disclosure
Media
CVE-2021-24165
Ninja Forms Contact Form <= 3.4.33 - Administrator Open Redirect
Alta
CVE-2020-36174
Ninja Forms Contact Form – The Drag and Drop Form Builder for WordPress <= 3.4.27 - Cross-Site Request Forgery to Plugin Installation
Media
CVE-2020-36175
Ninja Forms Contact Form – The Drag and Drop Form Builder for WordPress <= 3.4.27 - Validation Bypass via Email Field
Media
CVE-2020-36173
Ninja Forms Contact Form – The Drag and Drop Form Builder for WordPress <= 3.4.27.1 - Stored Cross-Site Scripting
Media
CVE-2020-12462
Ninja Forms Contact Form <= 3.4.24.1 - Cross-Site Request Forgery leading to Stored Cross-Site Scripting
Crítica
CVE-2022-0888
Ninja Forms - File Uploads Extension <= 3.3.0 - Arbitrary File Upload
Media
CVE-2020-8594
Ninja Forms Contact Form <= 3.4.22 - Stored Cross-Site Scripting
Alta
CVE-2019-10869
Ninja Forms - File Uploads <= 3.0.22 - Unauthenticated Arbitrary File Upload
Crítica
CVE-2019-15025
Ninja Forms Contact Form <= 3.3.21.1 - SQL Injection
Media
CVE-2018-19796
Ninja Forms Contact Form <= 3.3.19 - Authenticated Open Redirect
Media
CVE-2018-19287
Ninja Forms Contact Form <= 3.3.17 - Cross-Site Scripting via begin_date, end_date, or form_id Parameter
Alta
aa735320-f7fe-4e51-9f9a-f4c8f3ddc2e7
Ninja Forms Contact Form – The Drag and Drop Form Builder for WordPress <= 3.3.13 - Cross-Site Scripting
Alta
CVE-2018-16308
Ninja Forms Contact Form <= 3.3.13 - CSV Injection
Identifica las vulnerabilidades de tu aplicación
Con la integración de DockRay y el inventario de software activado, DockRay compara las versiones notificadas de los componentes con las vulnerabilidades conocidas y avisa de las coincidencias confirmadas. La cobertura depende de la tecnología compatible y de los avisos disponibles.