CyberRota Analysis
AI-GeneratedThe Ninja Forms WordPress plugin versions 3.14.8 and earlier are vulnerable due to a missing authorization check in the Gutenberg block's render callback, allowing authenticated users with Author-level privileges to expose sensitive form submissions to unauthenticated visitors. This vulnerability can lead to unauthorized access to personally identifiable information, including names and email addresses, by embedding the block with an arbitrary formID. WordPress site administrators using this plugin should prioritize patching to mitigate potential data leaks.
Original NVD Description
Ninja Forms WordPress plugin version 3.14.8 and prior contains a missing authorization vulnerability in the render callback of the `ninja-forms/submissions-table` Gutenberg block that allows authenticated attackers with Author-level privileges to expose stored form submissions to unauthenticated visitors by embedding the block with an arbitrary formID on a published post. Attackers can retrieve the signed bearer token injected into every page visitor's browser via `wp_localize_script` and use it against the REST API submissions endpoint to access all saved form submission field values, including sensitive personally identifiable information such as names, email addresses, and phone numbers.