WordPress Ninja Forms Signature Contract Add-On 3.2.5 Broken Access Control Vulnerability Fix

Vulnerability Overview Vulnerability Name: WordPress Ninja Forms Signature Contract Add-On Plugin 3.2.5 contains an exploitable Broken Access Control vulnerability. Vulnerability Severity: Low priority. Vulnerability Description: This vulnerability allows unauthorized access, enabling users to access pages or perform actions that should not be permitted, potentially leading to the exposure of user data. Scope of Impact Affected Plugin: Ninja Forms Signature Contract Add-On Plugin. Affected Versions: Version 3.2.5 and earlier. Number of Affected Sites: Approximately 10,000 WordPress sites. Remediation Fixed Version: Update to version 3.2.6 or higher to remediate this vulnerability. Release Date: January 2, 2024. Remediation Method: Update the plugin to the latest version to fix the vulnerability. Timeline First Discovered: January 2, 2024. Reported to Developer: January 2, 2024. Fix Released: January 2, 2024. Additional Information Vulnerability Source: Discovered and reported by Patchstack. Vulnerability Details: More detailed information is available in the Patchstack vulnerability database. Summary WordPress Ninja Forms Signature Contract Add-On Plugin 3.2.5 contains a low-priority Broken Access Control vulnerability affecting approximately 10,000 sites. This vulnerability allows unauthorized access, which may lead to user data exposure. Users are advised to update to version 3.2.6 or higher as soon as possible to remediate this vulnerability. The vulnerability was discovered and fixed on January 2, 2024.

Goal Reached Thanks to every supporter — we hit 100%!

WordPress Ninja Forms Signature Contract Add-On 3.2.5 Broken Access Control Vulnerability Fix

More from this source