medium5.3
CVE-2025-14072
The Ninja Forms WordPress plugin before 3.13.3 allows unauthenticated attackers to generate valid access tokens via the REST API which can then be used to read…
Impact
The Ninja Forms WordPress plugin before 3.13.3 allows unauthenticated attackers to generate valid access tokens via the REST API which can then be used to read form submissions.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Ninjaforms | Ninja Forms | before 3.13.3 |