CVE Database /
CVE-2021-24164
CVE · Medium
CVE-2021-24164 — Ninja Forms – The Contact Form Builder That Grows With You [ninja-forms] < 3.4.34.1
| CVE |
Vulnerability |
Type |
Severity |
Affected |
Fixed in |
Published |
Status |
|
CVE-2021-24164
|
Ninja Forms – The Contact Form Builder That Grows With You [ninja-forms] < 3.4.34.1 |
Exposure of Sensitive Information to an Unauthorized Actor |
Medium
4.3
|
< 3.4.34.1
|
3.4.34.1 |
2021-02-16 |
—
|
CVE-2021-24164
In vulnerable versions of the Ninja Forms Contact Form WordPress plugin, users with low-level access, such as subscribers, can exploit a security flaw to trigger an action that allows them to obtain the connection URL required to establish an OAuth connection. Additionally, these users can retrieve the client ID for an existing OAuth connection.
Based on public CVE data (MITRE/NVD).
Scan your WordPress site free
No signup, no credit card — enter your URL and get a security report in seconds.
See the full security page for this plugin
Browse the CVE database
Browse all security findings