Ninja Forms Google Sheet Connector, CVE-2025-13136

CVE, Research URL: CVE-2025-13136
Home page URL: Security reports for Ninja Forms Google Sheet Connector
Application: Ninja Forms Google Sheet Connector
Published on: Nov 22, 2025
Research Description: The GSheetConnector For Ninja Forms plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check on the 'njform-google-sheet-config ' page in all versions up to, and including, 2.0.1. This makes it possible for authenticated attackers, with Subscriber-level access and above, to retrieve information about the system.
Affected versions: max 2.0.2.
Status: vulnerable