Security Update Released for Ninja Forms WordPress Plugin

Threat ID:: CC-3761
Category:
Threat Severity:: Information only
Threat Vector:
Published:: 19 February 2021 11:19 AM

Report a cyber attack: call 0300 303 5222 or email [email protected]

Affected platforms

The following platforms are known to be affected:

Ninja Forms Versions: 3.4.34 and earlier

Threat details

Introduction

Saturday Drive has released a security update to address remote code execution vulnerabilities in its Ninja Forms WordPress plugin. A remote attacker could exploit these vulnerabilities to take control of an affected system.

Remediation advice

Users and administrators are encouraged to review the Ninja Forms Readme and apply the necessary updates.

Last edited: 19 February 2021 11:26 am