Ninjaforms

    Dashboard / Vendors

    Products: 5
    Vulnerabilities: 76
    Known Exploited: 0
    8
    Critical Level Threats
    19
    High Level Threats
    49
    Medium Level Threats
    0
    Low Level Threats

    Vulnerabilities

    100806040200
    JanFebMarAprMayJunJulAugSepOctNovDec
    Critical Level Threats
    High Level Threats
    Medium Level Threats
    Low Level Threats

    Products Security index

    Actions
    Items Per Page

    Vulnerabilities

    CVE-2026-95515

    WordPress Ninja Forms plugin <= 3.15.3 - Cross Site Scripting (XSS) vulnerability

    Last Modified: Sep 23, 2026
    Published: Sep 23, 2026

    CVE-2026-91827

    Ninja Forms 3.15.3 - Unauthenticated PHP Object Injection via CSV Export

    Last Modified: Sep 22, 2026
    Published: Sep 22, 2026

    CVE-2026-92438

    Ninja Forms 3.15.3 - Unauthenticated Stored XSS via Paragraph Text Field in Submissions Admin

    Last Modified: Sep 22, 2026
    Published: Sep 22, 2026

    CVE-2026-80437

    Ninja Forms 3.14.10 - 3.15.1 - Unauthenticated Arbitrary Shortcode Execution via IP and Referer Merge Tags

    Last Modified: Sep 06, 2026
    Published: Sep 06, 2026

    CVE-2026-80438

    Ninja Forms 3.14.0 - 3.15.1 - Authenticated Arbitrary Post Modification and Sensitive Information Disclosure via Abilities REST API

    Last Modified: Sep 04, 2026
    Published: Sep 04, 2026
    Items Per Page
    Ninjaforms Vulnerabilities & Security CVEs | CVE-DB