Ninjaforms Ninja_forms_file_uploads
4 CVEs affecting Ninjaforms Ninja_forms_file_uploads. Latest disclosed: 2024-09-07. Critical: 1, High: 3.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2022-0888 | Critical | 9.8 | 2022-03-23 | The Ninja Forms - File Uploads Extension WordPress plugin is vulnerable to arbitrary file uploads due to insufficient input file type validation found in the ~… |
CVE-2019-10869 | High | 8.1 | 2019-05-07 | Path Traversal and Unrestricted File Upload exists in the Ninja Forms plugin before 3.0.23 for WordPress (when the Uploads add-on is activated). This allows an… |
CVE-2024-1596 | High | 7.2 | 2024-09-07 | The Ninja Forms - File Uploads plugin for WordPress is vulnerable to Stored Cross-Site Scripting via an uploaded file (e.g. RTX file) in all versions up to, an… |
CVE-2022-0889 | High | 7.2 | 2022-03-23 | The Ninja Forms - File Uploads Extension WordPress plugin is vulnerable to reflected cross-site scripting due to missing sanitization of the files filename par… |