WordPress Plugin Vulnerabilities

Ninja Forms < 3.4.34 - CSRF to OAuth Service Disconnection

Description

The wp_ajax_nf_oauth_disconnect from the plugin had no nonce protection making it possible for attackers to craft a request to disconnect a site's OAuth connection.

Proof of Concept

Affects Plugins

Plugin icon
ninja-forms
Fixed in 3.4.34

References

CVE
CVE-2021-24166
URL
https://www.wordfence.com/blog/2021/02/one-million-sites-affected-four-severe-vulnerabilities-patched-in-ninja-forms/

Classification

Type
CSRF
OWASP top 10
A2: Broken Authentication and Session Management
CWE
CWE-352
CVSS
6.1 (medium)

Miscellaneous

Original Researcher
Chloe Chamberland
Submitter
Chloe Chamberland
Submitter website
https://wordfence.com
Submitter twitter
infosecchloe
Verified
Yes
WPVDB ID
b531fb65-a8ff-4150-a9a1-2a62a3c00bd6

Timeline

Publicly Published
2021-02-16 (about 4 years ago)
Added
2021-02-17 (about 4 years ago)
Last Updated
2021-03-19 (about 4 years ago)

Other

Published
Title
Published
2025-01-24
Title
Roi Calculator < 1.1 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Published
2025-03-21
Title
CITS Support svg, webp Media and TTF,OTF File Upload, Use Custom Fonts <= 4.2 - Cross-Site Request Forgery to Settings Update
Published
2023-10-03
Title
Sp*tify Play Button for WordPress < 2.11 - Settings Update via CSRF
Published
2023-11-28
Title
MkRapel Regiones y Ciudades de Chile para WC <= 4.3.0 - Cross-Site Request Forgery via multiple functions
Published
2024-05-03
Title
Stop Spammers Security | Block Spam Users, Comments, Forms < 2024.5 - Cross-Site Request Forgery (CSRF) via sfs_process