Ninja Forms WordPress Plugin Cross-Site Request Forgery Vulnerability Allowing Unauthenticated File Deletion

A Cross-Site Request Forgery (CSRF) vulnerability has been identified in the Ninja Forms WordPress plugin, specifically in versions through 3.12.0. The issue arises from inadequate nonce validation when exporting CSV files, enabling unauthenticated attackers to delete these files by tricking an administrator into clicking a link.

Impact

Exploitation of this vulnerability could lead to unauthorized deletion of CSV files exported by the Ninja Forms plugin.

Reproduction

To reproduce this vulnerability, an attacker must exploit the lack of proper nonce validation by convincing an administrator to click a link that triggers the CSV export action without the necessary security token. This can be done by sending a crafted request that exploits the CSRF vulnerability, taking advantage of the administrator's active session.

Remediation

Users are advised to update the Ninja Forms WordPress plugin to version 3.12.1 or later.