CVE · Medium
| CVE | Vulnerability | Type | Severity | Affected | Fixed in | Published | Status |
|---|---|---|---|---|---|---|---|
| CVE-2021-24166 | Ninja Forms – Contact Form Builder with Calculators, Quizzes, Signatures & AI Form Builder [ninja-forms] < 3.4.34 | Cross-Site Request Forgery (CSRF) | Medium 5.4 | < 3.4.34 | 3.4.34 | 2021-02-16 | — |
The Ninja Forms plugin for WordPress before version 3.4.34 lacked proper security checks, allowing an attacker to manipulate the plugin's disconnect functionality for OAuth connections, potentially allowing unauthorized access or disruption of the site's OAuth connections.
Based on public CVE data (MITRE/NVD).
No signup, no credit card — enter your URL and get a security report in seconds.