kstover Ninja Forms

4 known vulnerabilities in kstover Ninja Forms, with patch priority, exploit likelihood and the news covering them.

Latest vulnerabilities

  • CVE-2026-90438 CVSS 7.2 high The Ninja Forms – The Contact Form Builder That Grows With You plugin for WordPress is vulnerable to Stored Cross-Site Scripting via…
  • CVE-2026-94504 CVSS 7.2 high Ninja Forms 3.15.3 stores an anonymous non-RTE textarea value and renders it without safe HTML encoding in the legacy submission editor…
  • CVE-2026-11363 CVSS 6.6 medium The Ninja Forms – The Contact Form Builder That Grows With You plugin for WordPress is vulnerable to PHP Object Injection in all versions…
  • CVE-2026-19769 CVSS 7.2 high The Ninja Forms – The Contact Form Builder That Grows With You plugin for WordPress is vulnerable to Stored Cross-Site Scripting via…