CVE · Medium

CVE-2021-34647 — Ninja Forms – The Contact Form Builder That Grows With You [ninja-forms] < 3.5.8

CVE Vulnerability Type Severity Affected Fixed in Published Status
CVE-2021-34647 Ninja Forms – The Contact Form Builder That Grows With You [ninja-forms] < 3.5.8 Missing Authorization Medium 6.5 < 3.5.8 3.5.8 2021-09-22

CVE-2021-34647

A vulnerability exists in the Ninja Forms WordPress plugin, specifically in the bulk_export_submissions function, allowing authenticated attackers to export all submission data via the /ninja-forms-submissions/export REST API, potentially revealing sensitive and personally identifiable information.

Based on public CVE data (MITRE/NVD).

Scan your WordPress site free

No signup, no credit card — enter your URL and get a security report in seconds.