Vulnerability Bulletins

CVE-2025-9083

   
Affected software WORDPRESS
 
The Ninja Forms WordPress plugin before 3.11.1 unserializes user input via form field, which could allow Unauthenticated users to perform PHP Object Injection when a suitable gadget is present on the blog.

Link:

https://nvd.nist.gov/vuln/detail/CVE-2025-9083