← Database

CVE-2025-14072

MEDIUM CVSS: 5.3 Published: 2026-01-02 Modified: 2026-06-17

Description

The Ninja Forms WordPress plugin before 3.13.3 allows unauthenticated attackers to generate valid access tokens via the REST API which can then be used to read form submissions.

Affected Platforms

Ninjaforms Ninja Forms

Weakness Type

NVD-CWE-Other

References