Description
WordPress Plugin Ninja Forms Contact Form-The Drag and Drop Form Builder for WordPress is prone to an open redirect vulnerability because the application fails to properly verify user-supplied input. Exploiting this issue may allow attackers to redirect users to arbitrary web sites and conduct phishing attacks; other attacks are also possible. WordPress Plugin Ninja Forms Contact Form-The Drag and Drop Form Builder for WordPress version 3.3.19 is vulnerable; prior versions may also be affected.
Remediation
Update to plugin version 3.3.19.1 or latest
References
Related Vulnerabilities
WordPress Plugin Import XML and RSS Feeds Arbitrary File Upload (2.1.3)
WordPress Plugin Visualizer:Tables and Charts Manager for WordPress Cross-Site Scripting (3.9.4)
Internet Information Services Other Vulnerability (CVE-2006-6579)
Moodle Incorrect Authorization Vulnerability (CVE-2021-20282)
SharePoint Permissions, Privileges, and Access Controls Vulnerability (CVE-2012-1860)