CVE-2024-0685

The Ninja Forms plugin for WordPress contains a vulnerability that allows an attacker to inject malicious SQL code into a database query. This occurs when an administrator exports personal data, and the attacker has submitted a specially crafted email address through a form on the website. The plugin's failure to properly sanitize user input allows the attacker to inject SQL code that is then executed, potentially leading to unauthorized access or data modification.

Based on public CVE data (MITRE/NVD).