VYPR
← All advisories
Medium severity6.6NVD Advisory· Published Oct 16, 2024· Updated Jun 17, 2026

CVE-2021-4451

CVE-2021-4451

Description

The NinjaFirewall plugin for WordPress is vulnerable to Authenticated PHAR Deserialization in versions up to, and including, 4.3.3. This allows authenticated attackers to perform phar deserialization on the server. This deserialization can allow other plugin or theme exploits if vulnerable software is present (WordPress, and NinjaFirewall).

Affected products

4
  • nintechnet/NinjaFirewall (WP Edition) – Advanced Security Plugin and Firewallv5
    Range: 0
  • WordPress/NinjaFirewallwp-canonicalize2 versions
    (expand)+ 1 more
    • (no CPE)
    • (no CPE)range: <=4.3.3
  • Nintechnet/Ninjafirewall
    cpe:2.3:a:nintechnet:ninjafirewall:*:*:*:*:*:wordpress:*:*
    Range: <=4.3.3

Patches

Vulnerability mechanics

References

2

News mentions

0

No linked articles in our index yet.