Description The ninja-forms plugin before 3.4.24.2 for WordPress allows CSRF with resultant XSS. References https://wordpress.org/plugins/ninja-forms/#developers