Known vulnerabilities in the 3.15.2 does not restrict its REST abilities to administrators, accepting a Ninja Forms plugin

1 security advisory has been published for the 3.15.2 does not restrict its REST abilities to administrators, accepting a Ninja Forms plugin. Each entry below states what an attacker can do, what privilege they need, and the version the issue was fixed in.