Ninja Forms: falla crítica expone 50.000 sitios

CVE-2026-0740 en Ninja Forms File Upload permite ejecución remota sin credenciales. 50.000 sitios afectados. Actualizá a 3.3.27 ahora y revisá si ya fui...

https://seguridadenwordpress.com/ninja-forms-vulnerabilidad-cve-2026-0740-file-upload/

#ninjaforms #cve20260740 #fileuploadrce #wordpressseguridad #ejecuciónremota

Alerta: Vulnerabilidad crítica en Ninja Forms

Actualmente explotan vulnerabilidad crítica en Ninja Forms. Más de 50,000 sitios WordPress afectados. Actualiza el plugin a versión 3.3.27 inmediatamente.

https://donweb.news/vulnerabilidad-ninja-forms-wordpress/

#wordpress #seguridad #ninjaforms #vulnerabilidad #plugin

Ninja Forms Flaw Exposes WordPress Sites to Code Execution Risk

A critical vulnerability in the popular Ninja Forms plugin has been discovered, allowing hackers to upload and execute malicious code on WordPress sites without needing login credentials. If you're using Ninja Forms, update to version 3.3.27 immediately to protect your site from remote code execution attacks.

https://osintsights.com/ninja-forms-flaw-exposes-wordpress-sites-to-code-execution-risk?utm_source=mastodon&utm_medium=social

#RemoteCodeExecution #Wordpress #NinjaForms #Vulnerability #ArbitraryFileUpload

Hackers exploit critical flaw in #NinjaForms #WordPress plugin

https://www.bleepingcomputer.com/news/security/hackers-exploit-critical-flaw-in-ninja-forms-wordpress-plugin/

#cybersecurity

Hackers Exploit Flaw in Ninja Forms WordPress Plugin

A critical vulnerability in the Ninja Forms File Uploads premium WordPress plugin allows hackers to upload malicious files and execute code on your server - putting your entire site at risk. This flaw lets unauthenticated users wreak havoc, making it essential to take immediate action to protect your online presence.

https://osintsights.com/hackers-exploit-flaw-in-ninja-forms-wordpress-plugin

#Wordpress #NinjaForms #FileUploads #RemoteCodeExecution #Vulnerability

The Ninja Forms element is broken in Visual Composer and displays as "Ninja Forms plugin not installed" on the page instead of the form.

To fix simply replace the VC Ninja Forms element with a regular Wordpress shortcode one

Now off to fix several client sites effected by this

#Wordpress #NinjaForms #VisualComposer

Three critical vulnerabilities have been discovered in this popular plugin, which could have serious consequences for users and website owners.

#cybersecurity #vulnerabilities #ninjaforms

https://cybersec84.wordpress.com/2023/07/31/ninja-forms-plugin-security-vulnerabilities-put-800000-sites-at-risk/