critical9.8
CVE-2025-9083
The Ninja Forms WordPress plugin before 3.11.1 unserializes user input via form field, which could allow Unauthenticated users to perform PHP Object Injection …
Impact
The Ninja Forms WordPress plugin before 3.11.1 unserializes user input via form field, which could allow Unauthenticated users to perform PHP Object Injection when a suitable gadget is present on the blog.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Ninjaforms | Ninja Forms | before 3.11.1 |