CVE-2025-14072 | Teknoloji dünyasından en güncel haberleri ve güvenlikle ilgili gelişmeleri takip edin.

The Ninja Forms WordPress plugin before 3.13.3 allows unauthenticated attackers to generate valid access tokens via the REST API which can then be used to read…
Medium CVSS: 5.3

CVE-2025-14072

The Ninja Forms WordPress plugin before 3.13.3 allows unauthenticated attackers to generate valid access tokens via the REST API which can then be used to read form submissions.
Vendor
Ninjaforms
Product
Ninja Forms
CWE
NVD-CWE-Other
Yayın Tarihi
2026-01-02 06:15:53
Güncelleme
2026-01-09 13:58:47
Source Identifier
contact@wpscan.com
KEV Date Added
-

Kategoriler

NVD-CWE-Other Ninja Forms MEDIUM Ninjaforms 2026

Referanslar

https://wpscan.com/vulnerability/4b19a333-eb19-4903-aa96-1fe871dd0f9f/