SECURITYApr 7 · 22:03 UTCBLEEPING COMPUTERBill Toulas

Hackers exploit critical flaw in Ninja Forms WordPress plugin

A critical vulnerability in the Ninja Forms File Uploads premium add-on for WordPress allows unauthenticated arbitrary file uploads, enabling remote code execution. The flaw poses a significant security risk to WordPress users.

Nexus surfaces and summarizes. The full story lives at the source.

Mentioned

Ninja Forms File UploadstopicWordPresstopicRemote code executiontopicArbitrary file uploadtopicCritical flawtopic

Spot something wrong with this article?Report a problem →

Forward this