https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-07T20:13:08.334109+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cve-2021-4451 CVE-2021-4451 — NinjaFirewall <= 4.3.3 - Authenticated PHAR Deserialization 2026-10-07T20:13:08.350150+00:00

Affected: nintechnet NinjaFirewall (WP Edition) – Advanced Security Plugin and Firewall, ninjatechnologiesnetwork ninja_firewall

The NinjaFirewall plugin for WordPress is vulnerable to Authenticated PHAR Deserialization in versions up to, and including, 4.3.3. This allows authenticated attackers to perform phar deserialization on the server. This deserialization can allow other plugin or theme exploits if vulnerable software is present (WordPress, and NinjaFirewall).