title: Ninja Forms < 3.4.34 - CSRF to OAuth Service Disconnection
description: The wp_ajax_nf_oauth_disconnect from the Ninja Forms Contact Form – The Drag and Drop Form Builder for WordPress WordPress plugin before 3.4.34 had no nonce protection making it possible for attackers to craft a request to disconnect a site's OAuth connection.
problem types: CWE-352 Cross-Site Request Forgery (CSRF)
affected:
{
product: Ninja Forms Contact Form – The Drag and Drop Form Builder for WordPress
vendor: Unknown
versions:
lessThan: 3.4.34, status: affected, version: 3.4.34, versionType: custom
}