Vulnerabilities > CVE-2021-24163 - Missing Authorization vulnerability in Ninjaforms Ninja Forms

CVSS 8.8 - HIGH

Attack vector

NETWORK

Attack complexity

LOW

Privileges required

LOW

Confidentiality impact

HIGH

Integrity impact

HIGH

Availability impact

HIGH

network

low complexity

ninjaforms

CWE-862

NVD

Published: 2021-04-05

Updated: 2023-11-07

Summary

The AJAX action, wp_ajax_ninja_forms_sendwp_remote_install_handler, did not have a capability check on it, nor did it have any nonce protection, therefore making it possible for low-level users, such as subscribers, to install and activate the SendWP Ninja Forms Contact Form – The Drag and Drop Form Builder for WordPress WordPress plugin before 3.4.34 and retrieve the client_secret key needed to establish the SendWP connection while also installing the SendWP plugin.

Vulnerable Configurations

Part	Description	Count
Application	Ninjaforms Ninjaforms Ninja Forms - Ninjaforms Ninja Forms 2.2.6 Ninjaforms Ninja Forms 2.2.7 Ninjaforms Ninja Forms 2.2.31 Ninjaforms Ninja Forms 2.2.33 Ninjaforms Ninja Forms 2.2.34 Ninjaforms Ninja Forms 2.2.35 Ninjaforms Ninja Forms 2.2.36 Ninjaforms Ninja Forms 2.2.37 Ninjaforms Ninja Forms 2.2.39 Ninjaforms Ninja Forms 2.2.40 Ninjaforms Ninja Forms 2.2.41 Ninjaforms Ninja Forms 2.2.43 Ninjaforms Ninja Forms 2.2.45 Ninjaforms Ninja Forms 2.2.46 Ninjaforms Ninja Forms 2.2.47 Ninjaforms Ninja Forms 2.2.48 Ninjaforms Ninja Forms 2.2.49 Ninjaforms Ninja Forms 2.2.50 Ninjaforms Ninja Forms 2.2.51 Ninjaforms Ninja Forms 2.2.52 Ninjaforms Ninja Forms 2.2.53 Ninjaforms Ninja Forms 2.2.54 Ninjaforms Ninja Forms 2.2.55 Ninjaforms Ninja Forms 2.3 Ninjaforms Ninja Forms 2.3.1 Ninjaforms Ninja Forms 2.3.2 Ninjaforms Ninja Forms 2.3.3 Ninjaforms Ninja Forms 2.3.4 Ninjaforms Ninja Forms 2.3.5 Ninjaforms Ninja Forms 2.3.6 Ninjaforms Ninja Forms 2.3.7 Ninjaforms Ninja Forms 2.3.8 Ninjaforms Ninja Forms 2.4 Ninjaforms Ninja Forms 2.4.1 Ninjaforms Ninja Forms 2.4.2 Ninjaforms Ninja Forms 2.5 Ninjaforms Ninja Forms 2.5.1 Ninjaforms Ninja Forms 2.5.2 Ninjaforms Ninja Forms 2.5.3 Ninjaforms Ninja Forms 2.6 Ninjaforms Ninja Forms 2.6.1 Ninjaforms Ninja Forms 2.6.2 Ninjaforms Ninja Forms 2.6.3 Ninjaforms Ninja Forms 2.6.4 Ninjaforms Ninja Forms 2.6.5 Ninjaforms Ninja Forms 2.7 Ninjaforms Ninja Forms 2.7.1 Ninjaforms Ninja Forms 2.7.2 Ninjaforms Ninja Forms 2.7.3 Ninjaforms Ninja Forms 2.7.4 Ninjaforms Ninja Forms 2.7.5 Ninjaforms Ninja Forms 2.7.6 Ninjaforms Ninja Forms 2.7.7 Ninjaforms Ninja Forms 2.8 Ninjaforms Ninja Forms 2.8.1 Ninjaforms Ninja Forms 2.8.2 Ninjaforms Ninja Forms 2.8.3 Ninjaforms Ninja Forms 2.8.4 Ninjaforms Ninja Forms 2.8.5 Ninjaforms Ninja Forms 2.8.6 Ninjaforms Ninja Forms 2.8.7 Ninjaforms Ninja Forms 2.8.8 Ninjaforms Ninja Forms 2.8.9 Ninjaforms Ninja Forms 2.8.10 Ninjaforms Ninja Forms 2.8.11 Ninjaforms Ninja Forms 2.8.12 Ninjaforms Ninja Forms 2.8.13 Ninjaforms Ninja Forms 2.9 Ninjaforms Ninja Forms 2.9.1 Ninjaforms Ninja Forms 2.9.2 Ninjaforms Ninja Forms 2.9.3 Ninjaforms Ninja Forms 2.9.4 Ninjaforms Ninja Forms 2.9.5 Ninjaforms Ninja Forms 2.9.6 Ninjaforms Ninja Forms 2.9.7 Ninjaforms Ninja Forms 2.9.8 Ninjaforms Ninja Forms 2.9.9 Ninjaforms Ninja Forms 2.9.10 Ninjaforms Ninja Forms 2.9.11 Ninjaforms Ninja Forms 2.9.12 Ninjaforms Ninja Forms 2.9.13 Ninjaforms Ninja Forms 2.9.14 Ninjaforms Ninja Forms 2.9.15 Ninjaforms Ninja Forms 2.9.16 Ninjaforms Ninja Forms 2.9.17 Ninjaforms Ninja Forms 2.9.18 Ninjaforms Ninja Forms 2.9.19 Ninjaforms Ninja Forms 2.9.20 Ninjaforms Ninja Forms 2.9.21 Ninjaforms Ninja Forms 2.9.22 Ninjaforms Ninja Forms 2.9.23 Ninjaforms Ninja Forms 2.9.24 Ninjaforms Ninja Forms 2.9.25 Ninjaforms Ninja Forms 2.9.26 Ninjaforms Ninja Forms 2.9.27 Ninjaforms Ninja Forms 2.9.28 Ninjaforms Ninja Forms 2.9.29 Ninjaforms Ninja Forms 2.9.30 Ninjaforms Ninja Forms 2.9.31 Ninjaforms Ninja Forms 2.9.32 Ninjaforms Ninja Forms 2.9.33 Ninjaforms Ninja Forms 2.9.34 Ninjaforms Ninja Forms 2.9.35 Ninjaforms Ninja Forms 2.9.36 Ninjaforms Ninja Forms 2.9.37 Ninjaforms Ninja Forms 2.9.38 Ninjaforms Ninja Forms 2.9.39 Ninjaforms Ninja Forms 2.9.40 Ninjaforms Ninja Forms 2.9.41 Ninjaforms Ninja Forms 2.9.42 Ninjaforms Ninja Forms 2.9.43 Ninjaforms Ninja Forms 2.9.44 Ninjaforms Ninja Forms 2.9.45 Ninjaforms Ninja Forms 2.9.46 Ninjaforms Ninja Forms 2.9.47 Ninjaforms Ninja Forms 2.9.48 Ninjaforms Ninja Forms 2.9.49 Ninjaforms Ninja Forms 2.9.50 Ninjaforms Ninja Forms 2.9.51 Ninjaforms Ninja Forms 2.9.52 Ninjaforms Ninja Forms 2.9.53 Ninjaforms Ninja Forms 2.9.54 Ninjaforms Ninja Forms 2.9.55 Ninjaforms Ninja Forms 2.9.55.1 Ninjaforms Ninja Forms 2.9.55.2 Ninjaforms Ninja Forms 2.9.56 Ninjaforms Ninja Forms 2.9.56.1 Ninjaforms Ninja Forms 2.9.56.2 Ninjaforms Ninja Forms 2.9.57 Ninjaforms Ninja Forms 2.9.58 Ninjaforms Ninja Forms 3.0 Ninjaforms Ninja Forms 3.0.1 Ninjaforms Ninja Forms 3.0.2 Ninjaforms Ninja Forms 3.0.3 Ninjaforms Ninja Forms 3.0.4 Ninjaforms Ninja Forms 3.0.5 Ninjaforms Ninja Forms 3.0.6 Ninjaforms Ninja Forms 3.0.7 Ninjaforms Ninja Forms 3.0.8 Ninjaforms Ninja Forms 3.0.9 Ninjaforms Ninja Forms 3.0.10 Ninjaforms Ninja Forms 3.0.11 Ninjaforms Ninja Forms 3.0.12 Ninjaforms Ninja Forms 3.0.13 Ninjaforms Ninja Forms 3.0.14 Ninjaforms Ninja Forms 3.0.15 Ninjaforms Ninja Forms 3.0.16 Ninjaforms Ninja Forms 3.0.17 Ninjaforms Ninja Forms 3.0.18 Ninjaforms Ninja Forms 3.0.19 Ninjaforms Ninja Forms 3.0.20 Ninjaforms Ninja Forms 3.0.21 Ninjaforms Ninja Forms 3.0.22 Ninjaforms Ninja Forms 3.0.23 Ninjaforms Ninja Forms 3.0.24 Ninjaforms Ninja Forms 3.0.25 Ninjaforms Ninja Forms 3.0.26 Ninjaforms Ninja Forms 3.0.27 Ninjaforms Ninja Forms 3.0.28 Ninjaforms Ninja Forms 3.0.29 Ninjaforms Ninja Forms 3.0.30 Ninjaforms Ninja Forms 3.0.31 Ninjaforms Ninja Forms 3.0.32 Ninjaforms Ninja Forms 3.0.33 Ninjaforms Ninja Forms 3.0.34 Ninjaforms Ninja Forms 3.0.34.1 Ninjaforms Ninja Forms 3.1 Ninjaforms Ninja Forms 3.1.1 Ninjaforms Ninja Forms 3.1.2 Ninjaforms Ninja Forms 3.1.3 Ninjaforms Ninja Forms 3.1.4 Ninjaforms Ninja Forms 3.1.5 Ninjaforms Ninja Forms 3.1.6 Ninjaforms Ninja Forms 3.1.7 Ninjaforms Ninja Forms 3.1.8 Ninjaforms Ninja Forms 3.1.9 Ninjaforms Ninja Forms 3.2 Ninjaforms Ninja Forms 3.2.1 Ninjaforms Ninja Forms 3.2.2 Ninjaforms Ninja Forms 3.2.3 Ninjaforms Ninja Forms 3.2.4 Ninjaforms Ninja Forms 3.2.5 Ninjaforms Ninja Forms 3.2.6 Ninjaforms Ninja Forms 3.2.7 Ninjaforms Ninja Forms 3.2.8 Ninjaforms Ninja Forms 3.2.9 Ninjaforms Ninja Forms 3.2.10 Ninjaforms Ninja Forms 3.2.11 Ninjaforms Ninja Forms 3.2.12 Ninjaforms Ninja Forms 3.2.13 Ninjaforms Ninja Forms 3.2.14 Ninjaforms Ninja Forms 3.2.15 Ninjaforms Ninja Forms 3.2.16 Ninjaforms Ninja Forms 3.2.17 Ninjaforms Ninja Forms 3.2.18 Ninjaforms Ninja Forms 3.2.19 Ninjaforms Ninja Forms 3.2.20 Ninjaforms Ninja Forms 3.2.21 Ninjaforms Ninja Forms 3.2.22 Ninjaforms Ninja Forms 3.2.23 Ninjaforms Ninja Forms 3.2.24 Ninjaforms Ninja Forms 3.2.25 Ninjaforms Ninja Forms 3.2.26 Ninjaforms Ninja Forms 3.2.27 Ninjaforms Ninja Forms 3.3.0 Ninjaforms Ninja Forms 3.3.1 Ninjaforms Ninja Forms 3.3.2 Ninjaforms Ninja Forms 3.3.3 Ninjaforms Ninja Forms 3.3.4 Ninjaforms Ninja Forms 3.3.5 Ninjaforms Ninja Forms 3.3.6 Ninjaforms Ninja Forms 3.3.7 Ninjaforms Ninja Forms 3.3.8 Ninjaforms Ninja Forms 3.3.9 Ninjaforms Ninja Forms 3.3.10 Ninjaforms Ninja Forms 3.3.11 Ninjaforms Ninja Forms 3.3.12 Ninjaforms Ninja Forms 3.3.13 Ninjaforms Ninja Forms 3.3.14 Ninjaforms Ninja Forms 3.3.14.1 Ninjaforms Ninja Forms 3.3.15 Ninjaforms Ninja Forms 3.3.16 Ninjaforms Ninja Forms 3.3.17 Ninjaforms Ninja Forms 3.3.18 Ninjaforms Ninja Forms 3.3.19 Ninjaforms Ninja Forms 3.3.19.1 Ninjaforms Ninja Forms 3.3.20 Ninjaforms Ninja Forms 3.3.21 Ninjaforms Ninja Forms 3.3.21.1 Ninjaforms Ninja Forms 3.3.21.2 Ninjaforms Ninja Forms 3.3.21.3 Ninjaforms Ninja Forms 3.4.0 Ninjaforms Ninja Forms 3.4.1 Ninjaforms Ninja Forms 3.4.2 Ninjaforms Ninja Forms 3.4.3 Ninjaforms Ninja Forms 3.4.4 Ninjaforms Ninja Forms 3.4.5 Ninjaforms Ninja Forms 3.4.6 Ninjaforms Ninja Forms 3.4.7 Ninjaforms Ninja Forms 3.4.8 Ninjaforms Ninja Forms 3.4.9 Ninjaforms Ninja Forms 3.4.10 Ninjaforms Ninja Forms 3.4.11 Ninjaforms Ninja Forms 3.4.12 Ninjaforms Ninja Forms 3.4.13 Ninjaforms Ninja Forms 3.4.14 Ninjaforms Ninja Forms 3.4.15 Ninjaforms Ninja Forms 3.4.16 Ninjaforms Ninja Forms 3.4.17 Ninjaforms Ninja Forms 3.4.18 Ninjaforms Ninja Forms 3.4.19 Ninjaforms Ninja Forms 3.4.20 Ninjaforms Ninja Forms 3.4.21 Ninjaforms Ninja Forms 3.4.22 Ninjaforms Ninja Forms 3.4.22.1 Ninjaforms Ninja Forms 3.4.23 Ninjaforms Ninja Forms 3.4.24 Ninjaforms Ninja Forms 3.4.24.1 Ninjaforms Ninja Forms 3.4.24.2 Ninjaforms Ninja Forms 3.4.24.3 Ninjaforms Ninja Forms 3.4.25 Ninjaforms Ninja Forms 3.4.26 Ninjaforms Ninja Forms 3.4.27 Ninjaforms Ninja Forms 3.4.27.1 Ninjaforms Ninja Forms 3.4.28 Ninjaforms Ninja Forms 3.4.29 Ninjaforms Ninja Forms 3.4.30 Ninjaforms Ninja Forms 3.4.31 Ninjaforms Ninja Forms 3.4.32 Ninjaforms Ninja Forms 3.4.33	273

Common Weakness Enumeration (CWE)

CWE-862 - Missing Authorization

Summary

Vulnerable Configurations

Common Weakness Enumeration (CWE)

References