| Package | Affected versions | Patched versions |
|---|---|---|
| ninja forms | < 3.13.3 | 3.13.3 |
The Ninja Forms WordPress plugin before 3.13.3 allows unauthenticated attackers to generate valid access tokens via the REST API which can then be used to read form submissions.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free