The wp_ajax_nf_oauth_disconnect from the Ninja Forms Contact Form ?? The Drag and Drop Form Builder for WordPress WordPress plugin before 3.4.34 had no nonce protection making it possible for attackers to craft a request to disconnect a site's OAuth connection.