CVE Database /
CVE-2021-24164
CVE · Medium
CVE-2021-24164 — Ninja Forms – Contact Form Builder with Calculators, Quizzes, Signatures & AI Form Builder [ninja-forms] < 3.4.34.1
| CVE |
Vulnerability |
Type |
Severity |
Affected |
Fixed in |
Published |
Status |
|
CVE-2021-24164
|
Ninja Forms – Contact Form Builder with Calculators, Quizzes, Signatures & AI Form Builder [ninja-forms] < 3.4.34.1 |
Exposure of Sensitive Information to an Unauthorized Actor |
Medium
4.3
|
< 3.4.34.1
|
3.4.34.1 |
2021-02-16 |
—
|
CVE-2021-24164
In vulnerable versions of the Ninja Forms Contact Form WordPress plugin, users with low-level access, such as subscribers, can exploit a security flaw to trigger an action that allows them to obtain the connection URL required to establish an OAuth connection. Additionally, these users can retrieve the client ID for an existing OAuth connection.
Based on public CVE data (MITRE/NVD).
Scan your WordPress site free
No signup, no credit card — enter your URL and get a security report in seconds.
See the full security page for this plugin
Browse the CVE database
Browse all security findings