EUVD-2026-71992
GHSA-vqqm-xfwf-r9jq
Severity by source
AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N
Network-accessible and low-complexity, but requires subscriber-level auth (PR:L); impact is integrity-only (record deletion) with no confidentiality or availability consequence.
Primary rating from Vendor (Wordfence).
CVSS VectorVendor: Wordfence
Lifecycle Timeline
3DescriptionCVE.org
The Ninja Forms - Save Progress plugin for WordPress is vulnerable to Missing Authorization in versions up to, and including, 3.0.30. This is due to the lack of capability checks and nonce verification in the 'bulk_actions' function. This makes it possible for authenticated attackers, with subscriber-level access and above, to delete arbitrary database records from the 'wp_nf3_objects' table, such as saved submissions.
AnalysisAI
Missing authorization in the Ninja Forms - Save Progress WordPress plugin (versions ≤3.0.30) allows any subscriber-level authenticated user to bulk-delete arbitrary records from the wp_nf3_objects database table via the unprotected bulk_actions function. The handler enforces neither WordPress capability checks nor nonce verification, meaning any logged-in site user can destroy saved form submission data at will. …
Unlock full vulnerability intelligence
- Risk assessment & exploitation conditions
- Attack chain visualization
- Remediation with exact patch versions
- Threat intelligence from 22 sources
- Personal watchlist & email alerts
Free forever · No credit card required
Attack ChainAIDerived
Hypothetical attack flow derived from CVE metadata
Vulnerability AssessmentAI
| Exploitation | The attacker must hold a valid WordPress account with at least subscriber-level privileges on the target site - the lowest authenticated role in WordPress, available to any registered user. … Additional conditions and limiting factors are described in the full assessment. |
| Risk Assessment | The CVSS 4.3 vector (AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N) accurately captures the bounded scope: network-accessible and low-complexity, but gated behind subscriber-level authentication, with integrity-only impact and no confidentiality or availability consequence. … Full risk analysis with EPSS, KEV, and SSVC signal comparison available after sign-in. |
| Exploit Scenario | Full exploit scenario with step-by-step reproduction available after sign-in. |
| Remediation | Update the Ninja Forms - Save Progress plugin to a version beyond 3.0.30; the exact patched release is not confirmed in available data, so administrators should verify the current version via the WordPress plugin repository and cross-reference the Wordfence advisory at https://www.wordfence.com/threat-intel/vulnerabilities/id/a7d3e6ce-e6d7-455b-a43d-a14189b30491 before deploying. … Detailed patch versions, workarounds, and compensating controls in full report. |
Threat intelligence, references, and detailed analysis are available after sign-in.
Same weakness CWE-862 – Missing Authorization
View allShare
External POC / Exploit Code
Leaving vuln.today