CVE-2025-14072

Ninja Forms < 3.13.3 - Unauthenticated Token Generation and Submission Disclosure PUBLISHED

Description (CNA)

The Ninja Forms WordPress plugin before 3.13.3 allows unauthenticated attackers to generate valid access tokens via the REST API which can then be used to read form submissions.

Affected (CNA)

Vendor / product	Versions
Unknown / Ninja Forms	affected 0 before 3.13.3

CWE

No CWE identifiers supplied.

References

https://wpscan.com/vulnerability/4b19a333-eb19-4903-aa96-1fe871dd0f9f/

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.