Beveiligingsadvies

CVE-2026-1239

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2026-07-01 05:35:30

Laatst bijgewerkt 2026-07-01 10:42:10

Toegewezen door Wordfence

CVSS-score 7.5

Status PUBLISHED

Beschrijving

The Ninja Forms – The Contact Form Builder That Grows With You plugin for WordPress is vulnerable to unauthorized access of data due to a missing authorization check on the 'ninja-forms-views/token/refresh' REST callback in all versions up to, and including, 3.14.1. This makes it possible for unauthenticated attackers to view form submissions, which could potentially contain sensitive information.

← Alle CVE's bekijken Bekijk op cve.org ↗