CVE-2025-9083 | Teknoloji dünyasından en güncel haberleri ve güvenlikle ilgili gelişmeleri takip edin.

The Ninja Forms WordPress plugin before 3.11.1 unserializes user input via form field, which could allow Unauthenticated users to perform PHP Object Injection…
Critical CVSS: 9.8

CVE-2025-9083

The Ninja Forms WordPress plugin before 3.11.1 unserializes user input via form field, which could allow Unauthenticated users to perform PHP Object Injection when a suitable gadget is present on the blog.
Vendor
Ninjaforms
Product
Ninja Forms
CWE
CWE-502
Yayın Tarihi
2025-09-18 06:15:35
Güncelleme
2025-12-23 18:59:02
Source Identifier
contact@wpscan.com
KEV Date Added
-

Kategoriler

CWE-502 Ninja Forms CRITICAL Ninjaforms 2025

Referanslar

https://wpscan.com/vulnerability/60b4d7fc-5d23-4dcf-bd7f-e202cabc2625/ https://wpscan.com/vulnerability/60b4d7fc-5d23-4dcf-bd7f-e202cabc2625/