CVE-2016-1209

Critical

Published: 14/05/2016(UTC)Translated: 15/06/2026(UTC)NVD NIST

Summary

The Ninja Forms plugin before version 2.9.42.1 for WordPress allows remote attackers to conduct PHP object injection attacks via crafted serialized values in a POST request.

Risk Assessment

Attackers can exploit this vulnerability to inject malicious code, potentially leading to control over the application or server.

Recommendation

It is recommended to update the Ninja Forms plugin to the latest version to mitigate the risks associated with this vulnerability.

Original NVD description (English source)

The Ninja Forms plugin before 2.9.42.1 for WordPress allows remote attackers to conduct PHP object injection attacks via crafted serialized values in a POST request.