Saturday, May 2, 2020

Ninja Forms Vulnerability Fixed

There has been released an update to Ninja Forms which is a WordPress plugin with over 1 million installations. The updated version fixes a Cross-Site Request Forgery (CSRF) vulnerability (CVE-2020-12462).

Affected versions:
Ninja Forms versions earlier than 3.4.24.2

More information in Wordfence blog here.

No comments: