GSheetConnector For Ninja Forms Missing Authorization Vulnerability Allows Unauthorized Data Access

A vulnerability exists in the GSheetConnector For Ninja Forms WordPress plugin, all versions through 2.0.1, due to a lack of proper capability checks on the 'njform-google-sheet-config' page. This flaw enables authenticated attackers with Subscriber-level access and above to access sensitive system information.

Impact

Exploitation of this vulnerability could lead to unauthorized exposure of system information to authenticated users with Subscriber-level access or higher.

Remediation

Users can update to GSheetConnector For Ninja Forms version 2.0.2 or a newer patched version to address this vulnerability.