WordPress Vulnerability Report, Special Edition – June 20, 2022: Critical Vulnerability in Ninja Forms
Vulnerable plugins and themes are the #1 reason WordPress websites get hacked. Our WordPress Vulnerability Report powered by WPScan covers recent WordPress plugin, theme, and core vulnerabilities, and what to do if you run one of the vulnerable plugins or themes on your website. Each vulnerability will have a severity rating of low, medium, high, or critical.
Vulnerable plugins and themes are the #1 reason WordPress websites get hacked. Our WordPress Vulnerability Report powered by WPScan covers recent WordPress plugin, theme, and core vulnerabilities, and what to do if you run one of the vulnerable plugins or themes on your website.
Each vulnerability will have a severity rating of low, medium, high, or critical. Responsible disclosure and reporting of vulnerabilities is an integral part of keeping the WordPress community safe. Please share this post with your friends to help get the word out and make WordPress safer for everyone!
WordPress Plugin Vulnerabilities
Due to the size of the active install base of the Ninja Forms plugin, along with the critical nature of the vulnerability, the WordPress core team issued a forced security update last week. Any site running the Ninja Forms plugin needs to make sure their site has been successfully updated to version 3.6.11+ immediately!
Ninja Forms
- Installations:
- 1,000,000+
- Vulnerability:
- Unauthenticated PHP Object Injection
- Patched in Version:
- 3.6.11
- Severity Score:
- Critical
The PoC will be displayed on July 15, 2022, to give users time to update.
Get SolidWP tips direct in your inbox
Sign up
Get started with confidence — risk free, guaranteed
Sign up now — Get SolidWP updates and valuable content straight to your inbox
Sign up
Get started with confidence — risk free, guaranteed