Tag: Ninja Forms

Attackers are exploiting a Ninja Forms vulnerability and a separate flaw in WPC Product Bundles for WooCommerce to compromise WordPress websites. The campaign uses malicious JavaScript to install backdoors and create unauthorized administrator accounts, including one hidden from the dashboard. Researchers at WordPress security company Patchstack detected attacks against WPC Product Bundles on October 4.…

Attackers are actively exploiting a critical Ninja Forms vulnerability to access sensitive data from WordPress sites. They target the plugin to retrieve form submissions without authorization. The issue creates serious risk because attackers do not need valid credentials in certain cases. They can send direct requests and extract data with little resistance. This makes unpatched…