← Back to CVE List

CVE-2021-24166

Published: 2021-04-05T19:15Z
Last Modified: 2024-11-21T05:52Z
Source: MITRE CVE List
License: MITRE-CVE-TOS
The wp_ajax_nf_oauth_disconnect from the Ninja Forms Contact Form – The Drag and Drop Form Builder for WordPress WordPress plugin before 3.4.34 had no nonce protection making it possible for attackers to craft a request to disconnect a site's OAuth connection. > MITRE Terms of Use apply – see LICENSE‑MITRE.txt