Lucene search
PRIOn knowledge basePRION:CVE-2021-24166HistoryApr 05, 2021 - 7:15 p.m.
Cross site request forgery (csrf)
2021-04-0519:15:00
PRIOn knowledge base
www.prio-n.com
3
The wp_ajax_nf_oauth_disconnect from the Ninja Forms Contact Form – The Drag and Drop Form Builder for WordPress WordPress plugin before 3.4.34 had no nonce protection making it possible for attackers to craft a request to disconnect a site’s OAuth connection.
| CPE | Name | Operator | Version |
|---|---|---|---|
| ninja_forms | lt | 3.4.34 |
Related
nvd
nvd
CVE-2021-24166
2021-04-05 19:15:15
wpvulndb
wpvulndb
Ninja Forms < 3.4.34 - CSRF to OAuth Service Disconnection
2021-02-16 00:00:00
cve
cve
CVE-2021-24166
2021-04-05 19:15:15
wpexploit
wpexploit
Ninja Forms < 3.4.34 - CSRF to OAuth Service Disconnection
2021-02-16 00:00:00
cvelist
cvelist
CVE-2021-24166 Ninja Forms < 3.4.34 - CSRF to OAuth Service Disconnection
2021-04-05 18:27:43