NetSight
critical9.1

CVE-2018-20981

The ninja-forms plugin before 3.3.9 for WordPress has insufficient restrictions on submission-data retrieval during Export Personal Data requests.

Impact

The ninja-forms plugin before 3.3.9 for WordPress has insufficient restrictions on submission-data retrieval during Export Personal Data requests.

Affected products

VendorProductAffected versions
NinjaformsNinja Forms
before 3.3.9

Weakness classification

References