CVE Database /
CVE-2016-1209
CVE · Critical
CVE-2016-1209 — Ninja Forms – Contact Form Builder with Calculators, Quizzes, Signatures & AI Form Builder [ninja-forms] >= 2.9.36 - <= 2.9.42
| CVE |
Vulnerability |
Type |
Severity |
Affected |
Fixed in |
Published |
Status |
|
CVE-2016-1209
|
Ninja Forms – Contact Form Builder with Calculators, Quizzes, Signatures & AI Form Builder [ninja-forms] >= 2.9.36 - <= 2.9.42 |
Improper Input Validation |
Critical
9.8
|
2.9.36–2.9.43
|
2.9.43 |
2015-12-26 |
—
|
CVE-2016-1209
The Ninja Forms plugin, in versions 2.9.36 through 2.9.42, has a security flaw that allows unauthorized users to upload files to the server, including malicious PHP code, which can be executed by the web server with its privileges. This vulnerability is exploitable by anyone, not just authorized users, making it a significant security risk.
Based on public CVE data (MITRE/NVD).
Scan your WordPress site free
No signup, no credit card — enter your URL and get a security report in seconds.
See the full security page for this plugin
Browse the CVE database
Browse all security findings