CVE Database /
CVE-2019-15025
CVE · Critical
CVE-2019-15025 — Ninja Forms – The Contact Form Builder That Grows With You [ninja-forms] < 3.3.21.2
| CVE |
Vulnerability |
Type |
Severity |
Affected |
Fixed in |
Published |
Status |
|
CVE-2019-15025
|
Ninja Forms – The Contact Form Builder That Grows With You [ninja-forms] < 3.3.21.2 |
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') |
Critical
9.8
|
< 3.3.21.2
|
3.3.21.2 |
2019-01-07 |
—
|
CVE-2019-15025
A vulnerability was found in the Ninja Forms Contact Form plugin for WordPress, allowing an attacker to inject malicious SQL code into the plugin's database, potentially leading to unauthorized data access or modification.
Based on public CVE data (MITRE/NVD).
Scan your WordPress site free
No signup, no credit card — enter your URL and get a security report in seconds.
See the full security page for this plugin
Browse the CVE database
Browse all security findings