Extension WordPress
Vulnérabilités Ninja Forms – Excel Export
Cette page rassemble les failles publiées pour Ninja Forms – Excel Export, leurs plages de versions affectées et les correctifs signalés dans la base locale.
Historique de sécurité
CVE et vulnérabilités de Ninja Forms – Excel Export
3 fiches
Ninja Forms – Excel Export <= 3.3.6 – Authenticated (Subscriber+) Stored Cross-Site Scripting via 'filter' Parameter
The Ninja Forms – Excel Export plugin for WordPress is vulnerable to Stored Cross-Site Scripting in versions up to, and including, 3.3.6. This is due to the save_filter() AJAX handler storing the raw $_POST['filter'] array into a WordPress…
*-3.3.6
3.3.7
16/07/2026
Ninja Forms – Excel Export <= 3.3.6 – Missing Authorization to Authenticated (Subscriber+) XLS Write via Path Traversal
The Ninja Forms – Excel Export plugin for WordPress is vulnerable to Directory Traversal in all versions up to, and including, 3.3.6 via the 'spreadsheet_export_tmp_name' parameter. This makes it possible for authenticated attackers, with subscriber-level access and above,…
*-3.3.6
3.3.7
16/07/2026
Ninja Forms – Excel Export <= 3.3.6 – Insecure Direct Object Reference to Authenticated (Subscriber+) Sensitive Data Disclosure via 'spreadsheet_export_form_id' Parameter
The Ninja Forms – Excel Export plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions up to, and including, 3.3.6 via the 'spreadsheet_export_form_id' parameter due to missing validation on a user controlled key. This…
*-3.3.6
3.3.7
16/07/2026
Extensions également surveillés
WP Commander
Rechercher dans toute la base WordPress
Utilisez la recherche globale pour retrouver une extension, un thème, une CVE ou un identifiant de vulnérabilité.