Boletines de Vulnerabilidades

One Million Sites Affected: Four Severe Vulnerabilities Patched in Ninja Forms


Información sobre el sistema

   
Software afectado Wordpress

Descripción

On January 20, 2021, our Threat Intelligence team responsibly disclosed four vulnerabilities in Ninja Forms, a WordPress plugin used by over one million sites. One of these flaws made it possible for attackers to redirect site administrators to arbitrary locations. The second flaw made it possible for attackers with subscriber level access or above to […]

More info:

https://www.wordfence.com/blog/2021/02/one-million-sites-affected-four-severe-vulnerabilities-patched-in-ninja-forms/

Identificadores estándar

Propiedad Valor
CVE

Histórico de versiones

Versión Comentario Fecha
1.0 Advisory issued 2021-02-18

Miembros de

Ministerio de Defensa
CNI
CCN
CCN-CERT