CVE · High
| CVE | Vulnerability | Type | Severity | Affected | Fixed in | Published | Status |
|---|---|---|---|---|---|---|---|
| CVE-2021-24889 | Ninja Forms – The Contact Form Builder That Grows With You [ninja-forms] < 3.6.4 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') | High 7.2 | < 3.6.4 | 3.6.4 | 2021-10-26 | — |
The Ninja Forms Contact Form WordPress plugin, prior to version 3.6.4, fails to properly sanitize user input, specifically the keys of form fields submitted via the POST parameter, potentially enabling high-privilege users to execute malicious SQL code.
Based on public CVE data (MITRE/NVD).
No signup, no credit card — enter your URL and get a security report in seconds.