High severity8.8NVD Advisory· Published Apr 11, 2024· Updated Jun 17, 2026
CVE-2024-25572
CVE-2024-25572
Description
Cross-site request forgery (CSRF) vulnerability exists in Ninja Forms prior to 3.4.31. If a website administrator views a malicious page while logging in, unintended operations may be performed.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
4cpe:2.3:a:ninjaforms:ninja_forms:*:*:*:*:*:wordpress:*:*+ 1 more
- cpe:2.3:a:ninjaforms:ninja_forms:*:*:*:*:*:wordpress:*:*range: <3.4.31
- (no CPE)range: <3.4.31
- Range: prior to 3.4.31
Patches
Vulnerability mechanics
References
3- jvn.jp/en/jp/JVN50361500/nvdThird Party Advisory
- ninjaforms.comnvdProduct
- wordpress.org/plugins/ninja-forms/nvdProduct
News mentions
0No linked articles in our index yet.