CVE-2026-65050— WordPress Ninja Forms 授权问题漏洞

Ninja Forms Missing Authorization in submissions-table Gutenberg Block Discloses Form Submissions to Unauthenticated Visitors

Ninja Forms WordPress plugin version 3.14.8 and prior contains a missing authorization vulnerability in the render callback of the `ninja-forms/submissions-table` Gutenberg block that allows authenticated attackers with Author-level privileges to expose stored form submissions to unauthenticated visitors by embedding the block with an arbitrary formID on a published post. Attackers can retrieve the signed bearer token injected into every page visitor's browser via `wp_localize_script` and use it against the REST API submissions endpoint to access all saved form submission field values, including sensitive personally identifiable information such as names, email addresses, and phone numbers.

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

授权机制缺失

WordPress Ninja Forms 授权问题漏洞

WordPress Ninja Forms是WordPress基金会的一款信息化产品。 WordPress Ninja Forms 3.14.8及之前版本存在授权问题漏洞，该漏洞源于`ninja-forms/submissions-table` Gutenberg块的render回调中缺少授权，允许具有作者级别权限的经身份验证的攻击者通过在已发布帖子上嵌入带有任意formID的块，将存储的表单提交暴露给未经身份验证的访问者。攻击者可以检索通过`wp_localize_script`注入每个访问者浏览器的签

N/A

N/A