CVE-2020-36174: 
WordPress vulnerability analysis and mitigation

The Ninja Forms plugin before version 3.4.27.1 for WordPress was affected by a Cross-Site Request Forgery (CSRF) vulnerability discovered on September 22, 2020. This vulnerability, tracked as CVE-2020-36174, affected the services integration functionality of the plugin (WPScan, NVD).

The vulnerability was classified as a Cross-Site Request Forgery (CSRF) with a CVSS v3.1 base score of 6.5 (Medium). The vulnerability exists in the plugin's services installation mechanism, which could be exploited through the WordPress admin-ajax endpoint. The proof of concept URL format was: http://example.com/wp-admin/admin-ajax.php?action=nf_services_install&plugin=wpscan&install_path=wpscan/wpscan.php (WPScan).

If successfully exploited, this vulnerability could allow attackers to make a logged administrator install an arbitrary plugin from the WordPress repository without their knowledge or consent (WPScan).

The vulnerability requires user interaction and can be exploited through CSRF attacks targeting authenticated administrators. The attack vector is network-based (AV:N) with low attack complexity (AC:L) and requires user interaction (UI:R) (NVD).

The vulnerability was fixed in Ninja Forms version 3.4.27.1. Users are advised to update to this version or later to mitigate the risk (NVD).