CVE Intelligence

Westerndeal GSheetConnector For Ninja Forms vulnerabilities

🔔 Create alert RSS Version checker

Published CVEs affecting Westerndeal GSheetConnector For Ninja Forms: 1 record(s), with affected versions and fixes.

CVE-2025-13136 Medium · 4.3 CWE-862 Nov 22, 2025
GSheetConnector For Ninja Forms <= 2.0.1 - Missing Authorization to Authenticated (Subscriber+) System Information Exposure
The GSheetConnector For Ninja Forms plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check on the 'njform-google-sheet-config ' page in all versions up to, and including, 2.0.1. This makes it possible for authenticated attackers, with Subscriber-level access and above, to retrieve information about the system.