#ninjaforms — Public Fediverse posts

Ninja Forms Flaw Exposes WordPress Sites to Code Execution Risk

A critical vulnerability in the popular Ninja Forms plugin has been discovered, allowing hackers to upload and execute malicious code on WordPress sites without needing login credentials. If you're using Ninja Forms, update to version 3.3.27 immediately to protect your site from remote code execution attacks.

https://osintsights.com/ninja-forms-flaw-exposes-wordpress-sites-to-code-execution-risk?utm_source=mastodon&utm_medium=social

#RemoteCodeExecution #Wordpress #NinjaForms #Vulnerability #ArbitraryFileUpload

Hackers Exploit Flaw in Ninja Forms WordPress Plugin

A critical vulnerability in the Ninja Forms File Uploads premium WordPress plugin allows hackers to upload malicious files and execute code on your server - putting your entire site at risk. This flaw lets unauthenticated users wreak havoc, making it essential to take immediate action to protect your online presence.

https://osintsights.com/hackers-exploit-flaw-in-ninja-forms-wordpress-plugin

#Wordpress #NinjaForms #FileUploads #RemoteCodeExecution #Vulnerability

The Ninja Forms element is broken in Visual Composer and displays as "Ninja Forms plugin not installed" on the page instead of the form.

To fix simply replace the VC Ninja Forms element with a regular Wordpress shortcode one

Now off to fix several client sites effected by this

#Wordpress #NinjaForms #VisualComposer

Sicherheitsupdate: #WordPress-Websites mit Plug-in #NinjaForms attackierbar | Security https://www.heise.de/news/Sicherheitsupdate-WordPress-Websites-mit-Ninja-Forms-Plug-in-attackierbar-9230884.html #WordPressPlugin #Patchday

Three critical vulnerabilities have been discovered in this popular plugin, which could have serious consequences for users and website owners.

#cybersecurity #vulnerabilities #ninjaforms

https://cybersec84.wordpress.com/2023/07/31/ninja-forms-plugin-security-vulnerabilities-put-800000-sites-at-risk/

Three critical vulnerabilities have been discovered in this popular plugin, which could have serious consequences for users and website owners.

#cybersecurity #vulnerabilities #ninjaforms

https://cybersec84.wordpress.com/2023/07/31/ninja-forms-plugin-security-vulnerabilities-put-800000-sites-at-risk/

Flaw in Ninja Forms WordPress plugin allows hackers to steal submitted data https://www.bitdefender.com/blog/hotforsecurity/flaw-in-ninja-forms-wordpress-plugin-allows-hackers-to-steal-submitted-data/ #Vulnerability #vulnerability #databreach #NinjaForms #Guestblog #Wordpress #Dataloss #plugin

Flaw in Ninja Forms WordPress plugin allows hackers to steal submitted data https://www.bitdefender.com/blog/hotforsecurity/flaw-in-ninja-forms-wordpress-plugin-allows-hackers-to-steal-submitted-data/ #Vulnerability #vulnerability #databreach #NinjaForms #Guestblog #Wordpress #Dataloss #plugin

NinjaForms WordPress plugin, actively exploited in wild, receives forced security update https://grahamcluley.com/ninjaforms-wordpress-plugin-actively-exploited-in-wild-receives-forced-security-update/ #Vulnerability #vulnerability #NinjaForms #Wordpress #plugin