Styler for Ninja Forms <= 3.3.4 - Authenticated (Subscriber+) Arbitrary Option Deletion via deactivate_license
mediumThe Styler for Ninja Forms plugin for WordPress is vulnerable to unauthorized modification of data that can lead to a denial of service due to a missing capability check on the deactivate_license function in all versions up to, and including, 3.3.4. This makes it possible for authenticated attackers, with Subscriber-le...
- CVSS:
- 6.5
- Affected:
- up to 3.3.4
- Fix:
- No patched version reported
- Disclosed:
- Nov 12, 2024