CVE-2021-24166 — Ninja Forms < 3.4.34 - CSRF to OAuth Service Disconnection
The wp_ajax_nf_oauth_disconnect from the Ninja Forms Contact Form – The Drag and Drop Form Builder for WordPress WordPress plugin before 3.4.34 had no nonce protection making it…
Published: 2021-04-05 · CVSS: Unscored
The wp_ajax_nf_oauth_disconnect from the Ninja Forms Contact Form – The Drag and Drop Form Builder for WordPress WordPress plugin before 3.4.34 had no nonce protection making it possible for attackers to craft a request to disconnect a site's OAuth connection.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7