{"uuid": "b37a9f5b-b068-45ca-83f4-4a3d50f8ac79", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2016-1209", "type": "seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/multi/http/wp_ninja_forms_unauthenticated_file_upload.rb", "content": "{\"aliases\": [], \"arch\": \"php\", \"author\": [\"James Golovich\", \"rastating\"], \"autofilter_ports\": [80, 8080, 443, 8000, 8888, 8880, 8008, 3000, 8443], \"autofilter_services\": [\"http\", \"https\"], \"check\": true, \"default_credential\": false, \"description\": \"Versions 2.9.36 to 2.9.42 of the Ninja Forms plugin contain\\n          an unauthenticated file upload vulnerability, allowing guests\\n          to upload arbitrary PHP code that can be executed in the context\\n          of the web server.\", \"disclosure_date\": \"2016-05-04\", \"fullname\": \"exploit/multi/http/wp_ninja_forms_unauthenticated_file_upload\", \"is_install_path\": true, \"mod_time\": \"2025-06-23 12:43:46 +0000\", \"name\": \"WordPress Ninja Forms Unauthenticated File Upload\", \"needs_cleanup\": true, \"notes\": {\"Reliability\": [\"unknown-reliability\"], \"SideEffects\": [\"unknown-side-effects\"], \"Stability\": [\"unknown-stability\"]}, \"path\": \"/modules/exploits/multi/http/wp_ninja_forms_unauthenticated_file_upload.rb\", \"platform\": \"PHP\", \"post_auth\": false, \"rank\": 600, \"ref_name\": \"multi/http/wp_ninja_forms_unauthenticated_file_upload\", \"references\": [\"CVE-2016-1209\", \"WPVDB-8485\", \"URL-http://www.pritect.net/blog/ninja-forms-2-9-42-critical-security-vulnerabilities\"], \"rport\": 80, \"session_types\": false, \"targets\": [\"ninja-forms\"], \"type\": \"exploit\"}", "creation_timestamp": "2026-09-08T06:50:21.923954Z"}