Lucene search
Chloe ChamberlandWPVDB-ID:B531FB65-A8FF-4150-A9A1-2A62A3C00BD6HistoryFeb 16, 2021 - 12:00 a.m.
Ninja Forms < 3.4.34 - CSRF to OAuth Service Disconnection
2021-02-1600:00:00
Chloe Chamberland
wpscan.com
9
ninja forms
csrf
oauth
disconnection
vulnerability
EPSS
0.001
Percentile
39.5%
The wp_ajax_nf_oauth_disconnect from the plugin had no nonce protection making it possible for attackers to craft a request to disconnect a site’s OAuth connection.
PoC
Related
prion
prion
Cross site request forgery (csrf)
2021-04-05 19:15:00
nvd
nvd
CVE-2021-24166
2021-04-05 19:15:15
wpexploit
wpexploit
Ninja Forms < 3.4.34 - CSRF to OAuth Service Disconnection
2021-02-16 00:00:00
cve
cve
CVE-2021-24166
2021-04-05 19:15:15
cvelist
cvelist
CVE-2021-24166 Ninja Forms < 3.4.34 - CSRF to OAuth Service Disconnection
2021-04-05 18:27:43