https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-16T15:57:24.397321+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-226335 EUVD-2026-226335 2026-10-16T15:57:24.487099+00:00 EUVD-2026-226335 https://cve.radiocsirt.org/vuln/fkie_cve-2021-34648 fkie_cve-2021-34648 2026-10-16T15:57:24.487145+00:00

The Ninja Forms WordPress plugin is vulnerable to arbitrary email sending via the trigger_email_action function found in the ~/includes/Routes/Submissions.php file, in versions up to and including 3.5.7. This allows authenticated attackers to send arbitrary emails from the affected server via the /ninja-forms-submissions/email-action REST API which can be used to socially engineer victims.

 https://cve.radiocsirt.org/vuln/ghsa-6gw3-344q-7p6r GHSA-6gw3-344q-7p6r 2026-10-16T15:57:24.487181+00:00

The Ninja Forms WordPress plugin is vulnerable to arbitrary email sending via the trigger_email_action function found in the ~/includes/Routes/Submissions.php file, in versions up to and including 3.5.7. This allows authenticated attackers to send arbitrary emails from the affected server via the /ninja-forms-submissions/email-action REST API which can be used to socially engineer victims.

 https://cve.radiocsirt.org/vuln/gsd-2021-34648 gsd-2021-34648 2026-10-16T15:57:24.487200+00:00 gsd-2021-34648