CVE Database /
CVE-2021-24166
CVE · Medium
CVE-2021-24166 — Ninja Forms – The Contact Form Builder That Grows With You [ninja-forms] < 3.4.34
| CVE |
Vulnerability |
Type |
Severity |
Affected |
Fixed in |
Published |
Status |
|
CVE-2021-24166
|
Ninja Forms – The Contact Form Builder That Grows With You [ninja-forms] < 3.4.34 |
Cross-Site Request Forgery (CSRF) |
Medium
5.4
|
< 3.4.34
|
3.4.34 |
2021-02-16 |
—
|
CVE-2021-24166
The Ninja Forms plugin for WordPress before version 3.4.34 lacked proper security checks, allowing an attacker to manipulate the plugin's disconnect functionality for OAuth connections, potentially allowing unauthorized access or disruption of the site's OAuth connections.
Based on public CVE data (MITRE/NVD).
Scan your WordPress site free
No signup, no credit card — enter your URL and get a security report in seconds.
See the full security page for this plugin
Browse the CVE database
Browse all security findings