Description
The Ninja Forms WordPress plugin before 3.13.3 allows unauthenticated attackers to generate valid access tokens via the REST API which can then be used to read form submissions.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| — | Ninja Forms | < 3.13.3 | 3.13.3 |
References
- https://wpscan.com/vulnerability/4b19a333-eb19-4903-aa96-1fe871dd0f9f/ exploit vdb-entry technical-description