CVE-2025-11924 | Ninja Forms Plugin up to 3.13.1/3.13.2 on WordPress REST Endpoint resource injection

A vulnerability identified as problematic has been detected in Ninja Forms Plugin up to 3.13.1/3.13.2 on WordPress. This vulnerability affects unknown code of the component REST Endpoint. Performing manipulation results in improper control of resource identifiers.

This vulnerability was named CVE-2025-11924. The attack may be initiated remotely. There is no available exploit.