Описание
The wp_ajax_nf_oauth_disconnect from the Ninja Forms Contact Form – The Drag and Drop Form Builder for WordPress WordPress plugin before 3.4.34 had no nonce protection making it possible for attackers to craft a request to disconnect a site's OAuth connection.
Ссылки
- ExploitThird Party Advisory
- Third Party Advisory
- ExploitThird Party Advisory
- Third Party Advisory
Уязвимые конфигурации
Конфигурация 1Версия до 3.4.34 (исключая)
cpe:2.3:a:ninjaforms:ninja_forms:*:*:*:*:*:wordpress:*:*
EPSS
Процентиль: 27%
0.00093
Низкий
5.4 Medium
CVSS3
5.8 Medium
CVSS2
Дефекты
CWE-352
CWE-352
Связанные уязвимости
github
около 3 лет назад
The wp_ajax_nf_oauth_disconnect from the Ninja Forms Contact Form – The Drag and Drop Form Builder for WordPress WordPress plugin before 3.4.34 had no nonce protection making it possible for attackers to craft a request to disconnect a site's OAuth connection.
EPSS
Процентиль: 27%
0.00093
Низкий
5.4 Medium
CVSS3
5.8 Medium
CVSS2
Дефекты
CWE-352
CWE-352