Vulnerabilities > Ninjaforms > Ninja Forms > 3.4.34.1

DATE CVE VULNERABILITY TITLE RISK
2021-09-22 CVE-2021-34647 Missing Authorization vulnerability in Ninjaforms Ninja Forms
The Ninja Forms WordPress plugin is vulnerable to sensitive information disclosure via the bulk_export_submissions function found in the ~/includes/Routes/Submissions.php file, in versions up to and including 3.5.7.
network
low complexity
ninjaforms CWE-862
6.5
6.5
2021-09-22 CVE-2021-34648 Missing Authorization vulnerability in Ninjaforms Ninja Forms
The Ninja Forms WordPress plugin is vulnerable to arbitrary email sending via the trigger_email_action function found in the ~/includes/Routes/Submissions.php file, in versions up to and including 3.5.7.
network
low complexity
ninjaforms CWE-862
4.3
4.3