CVE-2021-24163

🗓️ 05 Apr 2021 18:27:43Reported by WPScanType

cve🔗 web.nvd.nist.gov📰️ 5 Media mentions👁 45 Views🌐 WEB

CVE-2021-24163 AJAX action vulnerability in SendWP Ninja Forms Contact Form plugi

Reporter	Title	Published	Views	Family All 11
CNNVD	WordPress Drag and Drop Form Builder 信息泄露漏洞	5 Apr 202100:00	–	cnnvd
Cvelist	CVE-2021-24163 Ninja Forms < 3.4.34 - Authenticated SendWP Plugin Installation and Client Secret Key Disclosure	5 Apr 202118:27	–	cvelist
EUVD	EUVD-2021-11077	7 Oct 202500:30	–	euvd
NVD	CVE-2021-24163	5 Apr 202119:15	–	nvd
OSV	CVE-2021-24163	5 Apr 202119:15	–	osv
Prion	Design/Logic Flaw	5 Apr 202119:15	–	prion
Positive Technologies	PT-2021-15709 · WordPress · Sendwp Ninja Forms Contact Form	5 Apr 202100:00	–	ptsecurity
RedhatCVE	CVE-2021-24163	22 May 202521:04	–	redhatcve
Tenable Nessus	Ninja Forms Plugin for WordPress < 3.4.34 Multiple Vulnerabilities	3 Mar 202100:00	–	nessus
wpexploit	Ninja Forms < 3.4.34 - Authenticated SendWP Plugin Installation and Client Secret Key Disclosure	16 Feb 202100:00	–	wpexploit

NVD

Vulners

Node

ninjaforms ninja_formsRange<3.4.34wordpress

[
  {
    "product": "Ninja Forms Contact Form – The Drag and Drop Form Builder for WordPress",
    "vendor": "Unknown",
    "versions": [
      {
        "lessThan": "3.4.34",
        "status": "affected",
        "version": "3.4.34",
        "versionType": "custom"
      }
    ]
  }
]

Source	Link
wordfence	www.wordfence.com/blog/2021/02/one-million-sites-affected-four-severe-vulnerabilities-patched-in-ninja-forms/
wpscan	www.wpscan.com/vulnerability/55fde9fa-f6cd-4546-bee8-4acc628251c2

Parameter	Position	Path	Description	CWE
action	request body	wp-admin/admin-ajax.php	AJAX action ninja_forms_sendwp_remote_install without capability check or nonce, enabling low-privilege users to install/activate SendWP and exfiltrate client_secret.	CWE-200, CWE-862