CVE · Medium

CVE-2024-2113 — Ninja Forms – The Contact Form Builder That Grows With You [ninja-forms] < 3.8.1

CVE Vulnerability Type Severity Affected Fixed in Published Status
CVE-2024-2113 Ninja Forms – The Contact Form Builder That Grows With You [ninja-forms] < 3.8.1 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Medium 4.3 < 3.8.1 3.8.1 2024-03-28

CVE-2024-2113

The Ninja Forms plugin for WordPress has a vulnerability that allows attackers to trick a site administrator into exporting a form's submissions to a publicly accessible location. This is due to a weakness in the plugin's security checks, which can be exploited through a malicious link or request. As a result, an attacker can potentially obtain sensitive information without needing to authenticate.

Based on public CVE data (MITRE/NVD).

Scan your WordPress site free

No signup, no credit card — enter your URL and get a security report in seconds.