Ninja Forms – Contact Form Builder with Calculators, Quizzes, Signatures & AI Form Builder Security: 59 Known Vulnerabilities

CVE-2026-100151 UNKNOWN EPSS 0.1%

Published 2026-10-31 · Affected: ≤3.15.5 · Fixed in 3.15.5

The Ninja Forms – Contact Form Builder with Calculators, Quizzes, Signatures & AI Form Builder plugin for WordPress is vulnerable to Reflected DOM-Based Cross-Site Scripting via 'querystring:<key>' UR

CVE-2026-109997 UNKNOWN EPSS 0.4%

Published 2026-10-31 · Affected: ≤3.15.5 · Fixed in 3.15.5

The Ninja Forms – Contact Form Builder with Calculators, Quizzes, Signatures & AI Form Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'formData.extra' parameter in a

CVE-2026-67187 UNKNOWN EPSS 0.1%

Published 2026-10-28 · Affected: <3.15.4 · Fixed in 3.15.4

Ninja Forms plugin for WordPress before 3.15.4 contains an incomplete server-side validation vulnerability that allows unauthenticated attackers to submit arbitrary values to Checkbox List, Multi-Sele

CVE-2026-92820 UNKNOWN EPSS 0.4%

Published 2026-10-02 · Affected: ≤3.3.34 · Fixed in 3.3.34

The Ninja Forms - File Uploads plugin for WordPress is vulnerable to arbitrary file operations in all versions up to, and including, 3.3.34 via the external (Amazon S3) upload flow. The plugin trusts

CVE-2026-90438 UNKNOWN EPSS 0.2%

Published 2026-10-02 · Affected: ≤3.15.4 · Fixed in 3.15.4

The Ninja Forms – The Contact Form Builder That Grows With You plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Paragraph Text (RTE) Field Submission in all versions up to, and in

CVE-2026-87870 UNKNOWN EPSS 0.2%

Published 2026-09-10 · Affected: ≤3.0.3 · Fixed in 3.0.3

The Ninja Forms - Scheduled Exports plugin for WordPress is vulnerable to Stored Cross-Site Scripting via REST API Parameters (interval, format, emailTo) in all versions up to, and including, 3.0.3 du

CVE-2026-87870 UNKNOWN EPSS 0.2%

Published 2026-09-10 · Affected: ≤3.0.3 · Fixed in 3.0.3

The Ninja Forms - Scheduled Exports plugin for WordPress is vulnerable to Stored Cross-Site Scripting via REST API Parameters (interval, format, emailTo) in all versions up to, and including, 3.0.3 du

CVE-2026-15550 UNKNOWN EPSS 0.2%

Published 2026-09-05 · Affected: ≤3.0.30 · Fixed in 3.0.30

The Ninja Forms - Save Progress plugin for WordPress is vulnerable to Missing Authorization in versions up to, and including, 3.0.30. This is due to the lack of capability checks and nonce verificatio

CVE-2026-19769 UNKNOWN EPSS 0.4%

Published 2026-09-05 · Affected: See advisory

The Ninja Forms – The Contact Form Builder That Grows With You plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Repeater Child 'type' Confusion via Unmatched Array Key in all vers

CVE-2026-19769 UNKNOWN EPSS 0.4%

Published 2026-09-05 · Affected: See advisory

The Ninja Forms – The Contact Form Builder That Grows With You plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Repeater Child 'type' Confusion via Unmatched Array Key in all vers

CVE-2026-65048 UNKNOWN EPSS 0.5%

Published 2026-07-21 · Affected: ≥3.10.4,<3.14.9 · Fixed in 3.14.9

Ninja Forms plugin for WordPress versions 3.10.4 through 3.14.9 contains an unauthenticated stored cross-site scripting vulnerability in the Repeatable Fieldset feature where parseSubmissionIndex() ac

CVE-2026-15161 UNKNOWN EPSS 0.2%

Published 2026-07-17 · Affected: ≤3.3.6 · Fixed in 3.3.6

The Ninja Forms - Excel Export plugin for WordPress is vulnerable to Stored Cross-Site Scripting in versions up to, and including, 3.3.6. This is due to the save_filter() AJAX handler storing the raw

CVE-2026-15160 UNKNOWN EPSS 0.5%

Published 2026-07-17 · Affected: ≤3.3.6 · Fixed in 3.3.6

The Ninja Forms - Excel Export plugin for WordPress is vulnerable to Directory Traversal in all versions up to, and including, 3.3.6 via the 'spreadsheet_export_tmp_name' parameter. This makes it poss

CVE-2026-15159 UNKNOWN EPSS 0.2%

Published 2026-07-17 · Affected: ≤3.3.6 · Fixed in 3.3.6

The Ninja Forms - Excel Export plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions up to, and including, 3.3.6 via the 'spreadsheet_export_form_id' parameter due to

CVE-2026-12557 UNKNOWN EPSS 0.3%

Published 2026-07-03 · Affected: ≤3.3.29 · Fixed in 3.3.29

The Ninja Forms - File Uploads plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 3.3.29. This is due to the plugin not properly verifying that a user is

CVE-2026-13369 UNKNOWN EPSS 0.5%

Published 2026-07-02 · Affected: ≤3.3.29 · Fixed in 3.3.29

The Ninja Forms - File Uploads plugin for WordPress is vulnerable to Arbitrary File Read via the attach_files() function in versions up to, and including, 3.3.29. This is due to the get_files_for_atta

CVE-2026-3642 UNKNOWN EPSS 0.3%

Published 2026-04-15 · Affected: See advisory

The e-shot™ form builder plugin for WordPress is vulnerable to Missing Authorization in all versions up to and including 1.0.2. The eshot_form_builder_update_field_data() AJAX handler lacks any capabi

CVE-2026-0740 UNKNOWN EPSS 1.0%

Published 2026-04-07 · Affected: ≤3.3.26 · Fixed in 3.3.26

The Ninja Forms - File Uploads plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the 'NF_FU_AJAX_Controllers_Uploads::handle_upload' function in all v

CVE-2026-2268 UNKNOWN EPSS 0.3%

Published 2026-02-10 · Affected: See advisory

The Ninja Forms plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 3.14.0. This is due to the unsafe application of the `ninja_forms_merge_tags`

CVE-2025-13139 UNKNOWN

Published 2026-01-24 · Affected: See advisory

The SurveyJS: Drag & Drop WordPress Form Builder plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 2.5.2. This is due to missing nonce validation o

CVE-2025-14072 UNKNOWN EPSS 0.3%

Published 2026-01-02 · Affected: See advisory

The Ninja Forms WordPress plugin before 3.13.3 allows unauthenticated attackers to generate valid access tokens via the REST API which can then be used to read form submissions.

CVE-2025-11924 UNKNOWN EPSS 0.4%

Published 2025-12-17 · Affected: See advisory

The Ninja Forms – The Contact Form Builder That Grows With You plugin for WordPress is vulnerable to Insecure Direct Object Reference in versions up to, and including, 3.13.2. This is due to the plugi

CVE-2025-11924 UNKNOWN EPSS 0.4%

Published 2025-12-17 · Affected: See advisory

The Ninja Forms – The Contact Form Builder That Grows With You plugin for WordPress is vulnerable to Insecure Direct Object Reference in versions up to, and including, 3.13.2. This is due to the plugi

CVE-2025-11924 UNKNOWN EPSS 0.4%

Published 2025-12-17 · Affected: See advisory

The Ninja Forms – The Contact Form Builder That Grows With You plugin for WordPress is vulnerable to Insecure Direct Object Reference in versions up to, and including, 3.13.2. This is due to the plugi

CVE-2025-13140 UNKNOWN EPSS 0.1%

Published 2025-12-02 · Affected: See advisory

The SurveyJS: Drag & Drop WordPress Form Builder plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.12.20. This is due to missing nonce validation

CVE-2025-10499 UNKNOWN EPSS 0.1%

Published 2025-09-27 · Affected: See advisory

The Ninja Forms – The Contact Form Builder That Grows With You plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 3.12.0. This is due to missing or

CVE-2025-10499 UNKNOWN EPSS 0.1%

Published 2025-09-27 · Affected: See advisory

The Ninja Forms – The Contact Form Builder That Grows With You plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 3.12.0. This is due to missing or

CVE-2025-10499 UNKNOWN EPSS 0.1%

Published 2025-09-27 · Affected: See advisory

The Ninja Forms – The Contact Form Builder That Grows With You plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 3.12.0. This is due to missing or

CVE-2025-10499 UNKNOWN EPSS 0.1%

Published 2025-09-27 · Affected: See advisory

The Ninja Forms – The Contact Form Builder That Grows With You plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 3.12.0. This is due to missing or

CVE-2025-10498 UNKNOWN EPSS 0.1%

Published 2025-09-27 · Affected: See advisory

The Ninja Forms – The Contact Form Builder That Grows With You plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 3.12.0. This is due to missing or inco

CVE-2025-10498 UNKNOWN EPSS 0.1%

Published 2025-09-27 · Affected: See advisory

The Ninja Forms – The Contact Form Builder That Grows With You plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 3.12.0. This is due to missing or inco

CVE-2025-10498 UNKNOWN EPSS 0.1%

Published 2025-09-27 · Affected: See advisory

The Ninja Forms – The Contact Form Builder That Grows With You plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 3.12.0. This is due to missing or inco

CVE-2025-10498 UNKNOWN EPSS 0.1%

Published 2025-09-27 · Affected: See advisory

The Ninja Forms – The Contact Form Builder That Grows With You plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 3.12.0. This is due to missing or inco

CVE-2025-9083 UNKNOWN EPSS 0.5%

Published 2025-09-18 · Affected: See advisory

The Ninja Forms WordPress plugin before 3.11.1 unserializes user input via form field, which could allow Unauthenticated users to perform PHP Object Injection when a suitable gadget is present on the

CVE-2025-9083 UNKNOWN EPSS 0.5%

Published 2025-09-18 · Affected: See advisory

The Ninja Forms WordPress plugin before 3.11.1 unserializes user input via form field, which could allow Unauthenticated users to perform PHP Object Injection when a suitable gadget is present on the

CVE-2025-2561 UNKNOWN EPSS 0.2%

Published 2025-05-19 · Affected: See advisory