CVE-2020-36174

MEDIUM

Ninja Forms < 3.4.27.1 - Cross-Site Request Forgery via Services Integration

Title source: llm

The Ninja Forms plugin before 3.4.27.1 for WordPress allows CSRF via services integration.

Core 1

Core References

Product, Release Notes, Third Party Advisory x_refsource_misc

CVSS v3 6.5

EPSS 0.0059

EPSS Percentile 44.1%

Attack Vector NETWORK

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N

CWE

CWE-352

Status published

Products (1)

ninjaforms/ninja_forms < 3.4.27.1

Published Jan 06, 2021

Tracked Since Feb 18, 2026