Security Advisory
CVE-2016-1209
CVE vulnerability detail — eXtreme Datacenter Security Operations
Description
The Ninja Forms plugin before 2.9.42.1 for WordPress allows remote attackers to conduct PHP object injection attacks via crafted serialized values in a POST request.