CVE-2024-25572

2024-04-1102:29:38

jpcert

www.cve.org

cross-site request forgery

website administrator

malicious page

unintended operations

6.8 Medium

AI Score

Confidence

Low

0.0004 Low

EPSS

Percentile

15.6%

JSON

Cross-site request forgery (CSRF) vulnerability exists in Ninja Forms prior to 3.4.31. If a website administrator views a malicious page while logging in, unintended operations may be performed.

CNA Affected

[
  {
    "vendor": "Saturday Drive",
    "product": "Ninja Forms",
    "versions": [
      {
        "version": "prior to 3.4.31",
        "status": "affected"
      }
    ]
  }
]

References

jvn.jp/en/jp/JVN50361500/

ninjaforms.com/

wordpress.org/plugins/ninja-forms/