CVE-2016-1209

PoC ×2—

CVSS 3.0

9.8 critical

EPSS

62%p99

Published

May 14, 2016 (May 14, 2016)

Modified

Jun 17, 2026

Description

The Ninja Forms plugin before 2.9.42.1 for WordPress allows remote attackers to conduct PHP object injection attacks via crafted serialized values in a POST request.

Vendors: ninjaforms
Products: ninja forms
Ecosystems: WordPress
Weakness: CWE-20
Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

NVD CVE.org GitHub PoCs EPSS (61.6%)

In the news0 stories

No ingested article mentions this CVE yet.