Date: May 1, 2020
One of the WordPress popular forms plugin Ninja Forms has recently updated its plugin to fix a serious vulnerability. The vulnerability rated highly, because it may allow an attacker to enter the level of administration. And take over the entire website.More about the Cross-Site Request Forgery Vulnerability
The vulnerability causing called Cross-Site Request Forgery. Also, this type of vulnerability exploits the absence of a normal security check. And, that allows an attacker to upload or replace files, and even gain administrative access.
This is how the site of the Common Vulnerability Enumeration explains such exploit:
World of WordPress is hosted by:
While others try to add more components to their hosting to make it go faster, we decided to build our hosting cloud fast from the ground up. We did so by stripping out everything we knew was deadweight.