CVE-2021-24165

CVE-2021-24165 describes an open redirect vulnerability in the Ninja Forms Contact Form WordPress plugin prior to version 3.4.34, affecting the wp_ajax_nf_oauth_connect AJAX action. This medium-severity vulnerability (CVSS 6.1) allows an attacker to redirect users to arbitrary malicious sites due to an unprotected, user-supplied redirect parameter, potentially leading to phishing or credential theft. While there is no evidence of active exploitation or Metasploit modules, Nuclei templates exist for detection, and the vulnerability has received minimal community discussion or media coverage.