Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
wpvulndbChloe ChamberlandWPVDB-ID:6147ACF5-E43F-47E6-AB56-C9C8BE584818
HistoryFeb 16, 2021 - 12:00 a.m.

Ninja Forms < 3.4.34 - Administrator Open Redirect

2021-02-1600:00:00
Chloe Chamberland
wpscan.com
11
ninja forms
admin open redirect
vulnerability
wp_ajax_nf_oauth_connect
open redirect
security incident

EPSS

0.001

Percentile

48.0%

JSON

The wp_ajax_nf_oauth_connect AJAX action was vulnerable to open redirect due to the use of a user supplied redirect parameter and no protection in place.

PoC

http://mysite.com/wp-admin/admin-ajax.php?client_id=1&amp;redirect;=https://google.com&amp;action;=nf_oauth_connect

Related

nvd 1
nuclei 1
wpexploit 1
prion 1
cvelist 1
cve 1
nvd
nvd
CVE-2021-24165
2021-04-05 19:15:15
nuclei
nuclei
WordPress Ninja Forms <3.4.34 - Open Redirect
2022-02-12 16:33:19
wpexploit
wpexploit
Ninja Forms < 3.4.34 - Administrator Open Redirect
2021-02-16 00:00:00
prion
prion
Open redirect
2021-04-05 19:15:00
cvelist
cvelist
CVE-2021-24165 Ninja Forms < 3.4.34 - Administrator Open Redirect
2021-04-05 18:27:43
cve
cve
CVE-2021-24165
2021-04-05 19:15:15

EPSS

0.001

Percentile

48.0%

JSON
Related for WPVDB-ID:6147ACF5-E43F-47E6-AB56-C9C8BE584818
nvd1nuclei1wpexploit1prion1cvelist1cve1