CVE-2018-20981: Input Validation

Q: What is CVE-2018-20981?

CVE-2018-20981 is a vulnerability in the ninja-forms plugin for WordPress that allows unauthorized retrieval of submission data during Export Personal Data requests.

Q: What is the severity of CVE-2018-20981?

CVE-2018-20981 has a severity rating of 9.1 (critical).

Q: How can I check if I am affected by CVE-2018-20981?

You can check if you are affected by CVE-2018-20981 by verifying if you have the ninja-forms plugin version before 3.3.9 for WordPress installed.

Q: How do I fix CVE-2018-20981?

To fix CVE-2018-20981, you should update your ninja-forms plugin to version 3.3.9 or later.

Q: Where can I find more information about CVE-2018-20981?

You can find more information about CVE-2018-20981 on the official WordPress plugin page for ninja-forms: https://wordpress.org/plugins/ninja-forms/#developers

Published Aug 22, 2019

Updated

The ninja-forms plugin before 3.3.9 for WordPress has insufficient restrictions on submission-data retrieval during Export Personal Data requests.

Affected Software

1 affected component

NinjaForms Ninja Forms Wordpress<3.3.9

Event History

Aug 22, 2019

CVE Published

via MITRE·12:40 PM

Data Sourced

via MITRE·12:40 PM

Description

Frequently Asked Questions

What is CVE-2018-20981?

CVE-2018-20981 is a vulnerability in the ninja-forms plugin for WordPress that allows unauthorized retrieval of submission data during Export Personal Data requests.

What is the severity of CVE-2018-20981?

CVE-2018-20981 has a severity rating of 9.1 (critical).

How can I check if I am affected by CVE-2018-20981?

You can check if you are affected by CVE-2018-20981 by verifying if you have the ninja-forms plugin version before 3.3.9 for WordPress installed.

How do I fix CVE-2018-20981?

To fix CVE-2018-20981, you should update your ninja-forms plugin to version 3.3.9 or later.

Where can I find more information about CVE-2018-20981?