Ninja Forms Contact Form < 3.8.1 - Publicly Accessible Form Submission Export via CSRF

Description

The plugin is vulnerable to Cross-Site Request Forgery This is due to missing or incorrect nonce validation on the nf_download_all_subs AJAX action. This makes it possible for unauthenticated attackers to trigger an export of a form's submission to a publicly accessible location via a forged request granted they can trick a site administrator into performing an action such as clicking on a link.