Product

Ninja Forms - File Uploads (<= 3.3.34)

1 brief RSS

Arbitrary File Operations Vulnerability in Ninja Forms File Uploads

The Ninja Forms File Uploads plugin for WordPress contains an unauthenticated vulnerability in the Amazon S3 upload flow that allows arbitrary file read, write, and deletion via insufficient path validation.

Ninja Forms - File Uploads web-application wordpress arbitrary-file-read arbitrary-file-write rce

1t 1c 1w ago