Saturday Drive Vulnerabilities and Affected Products
Vulnerabilities associated with Ninja Forms Contact Form (WordPress plugin).
Products
Clear product- Ninja Forms15 vulnerabilities
- Ninja Forms Contact Form2 vulnerabilities
- Ninja Forms Contact Form (WordPress plugin)1 vulnerability
- Ninja Forms Contact Form – The Drag and Drop Form Builder for WordPress1 vulnerability
| Vulnerability | Title and context | CVSS | EPSS | PoCs | Signals | STIX action |
|---|---|---|---|---|---|---|
CVE-2021-36827MEDIUM | WordPress Ninja Forms Contact Form plugin <= 3.6.9 - Authenticated Stored Cross-Site Scripting (XSS) vulnerabilityAuth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Saturday Drive's Ninja Forms Contact Form plugin <= 3.6.9 at WordPress via "label". CWE-79Jun 16, 2022 | CVSS4.8v3.1 | EPSS0.494% | PoCs0 | SignalsNot listed in CISA KEVNo known ransomware useNo Nuclei templates | STIX |