CVE-2026-81772

Unauthenticated PHP Object Injection in Ninja Forms - Layout & Styles <= 3.0.31 versions.

Published Sep 2, 2026
CVSS 8.8 high
0.5% chance of exploitation in the next 30 days (EPSS)

Affected software

Saturday Drive Ninja Forms

CVE-2026-81772 at the National Vulnerability Database