IDOR Vulnerability

Ninja Forms Insecure Direct Object Reference Vulnerability (CVE-2025-11924) — High Severity

The Ninja Forms plugin, a widely used contact form builder for WordPress, has been identified with a critical security flaw. This vulnerability, categorized as an Insecure Direct Object Reference (IDOR), could potentially expose sensitive form data to unauthorized individuals. If…

Alex Joseph
January 5, 2026

IDonate WordPress Plugin Insecure Direct Object Reference Vulnerability (CVE-2025-4522) — Medium Severity

Understanding the IDonate Plugin Security Flaw The IDonate – Blood Donation, Request And Donor Management System plugin for WordPress has a security flaw that could allow unauthorized users to delete accounts. This vulnerability, tracked as CVE-2025-4522, is an Insecure Direct…

Alex Joseph
December 5, 2025