Vulnerabilities > Ninjaforms > Ninja Forms > 3.4.24.2

DATE CVE VULNERABILITY TITLE RISK
2021-01-06 CVE-2020-36174 Cross-Site Request Forgery (CSRF) vulnerability in Ninjaforms Ninja Forms
The Ninja Forms plugin before 3.4.27.1 for WordPress allows CSRF via services integration.
network
low complexity
ninjaforms CWE-352
6.5
6.5
2021-01-06 CVE-2020-36173 Improper Encoding or Escaping of Output vulnerability in Ninjaforms Ninja Forms
The Ninja Forms plugin before 3.4.28 for WordPress lacks escaping for submissions-table fields.
network
low complexity
ninjaforms CWE-116
5.3
5.3