← CVE Intelligence

CVE-2025-9083

Ninja-forms < 3.11.1 - Unauthenticated PHP Objection PUBLISHED

Description (CNA)

The Ninja Forms WordPress plugin before 3.11.1 unserializes user input via form field, which could allow Unauthenticated users to perform PHP Object Injection when a suitable gadget is present on the blog.

Affected (CNA)

Vendor / productVersions
Unknown / Ninja Formsaffected 0 before 3.11.1

CWE

No CWE identifiers supplied.

References

ADP enrichment

CISA-ADP

No English description supplied.