CVE-2021-4451

—

CVSS 3.1

7.2 high

EPSS

<1%p48

Published

Oct 16, 2024 (Oct 16, 2024)

Modified

Jun 17, 2026

Description

The NinjaFirewall plugin for WordPress is vulnerable to Authenticated PHAR Deserialization in versions up to, and including, 4.3.3. This allows authenticated attackers to perform phar deserialization on the server. This deserialization can allow other plugin or theme exploits if vulnerable software is present (WordPress, and NinjaFirewall).

Vendors: nintechnet
Products: ninjafirewall
Ecosystems: WordPress
Weakness: CWE-502
Vector: CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

NVD CVE.org GitHub PoCs EPSS (0.6%)

In the news0 stories

No ingested article mentions this CVE yet.