Unknown Ninja Forms

4 known vulnerabilities in Unknown Ninja Forms, with patch priority, exploit likelihood and the news covering them.

Latest vulnerabilities

  • CVE-2026-92438 CVSS 8.8 high The Ninja Forms WordPress plugin 3.15.3 does not escape submitted form field values before outputting them on the submission edit screen…
  • CVE-2026-91827 CVSS 7.5 high The Ninja Forms WordPress plugin 3.15.3 does not prevent user-submitted form field values from being deserialised when an administrator…
  • CVE-2026-80437 CVSS 4.8 medium The Ninja Forms WordPress plugin from 3.14.10 before 3.15.2 does not prevent shortcodes in request-derived values from being executed when…
  • CVE-2026-80438 CVSS 5.9 medium The Ninja Forms WordPress plugin before 3.15.2 does not restrict its REST abilities to administrators, accepting a Ninja Forms WordPress…