Kstover vulnerabilities

Products

• Ninja Forms – The Contact Form Builder That Grows With You 17
• Ninja Forms – Contact Form Builder With Calculators, Quizzes, Signatures & Ai Form Builder 6

Newest

• kstover ninja forms – contact form builder with calculators, quizzes, signatures & ai form builder Ninja Forms <= 3.15.5 - Reflected DOM-Based Cross-Site Scripting via 'querystring:<key>' URL Parameter CVE-2026-100151 6.1 MediumOctober 31, 2026
• kstover ninja forms – contact form builder with calculators, quizzes, signatures & ai form builder Ninja Forms <= 3.15.5 - Unauthenticated Arbitrary Shortcode Execution via 'formData' Field Value via Success Message Merge Tag CVE-2026-100155 6.5 MediumOctober 31, 2026
• kstover ninja forms – contact form builder with calculators, quizzes, signatures & ai form builder Ninja Forms <= 3.15.5 - Unauthenticated Stored Cross-Site Scripting via 'extra' Parameter via Metadata Key Normalization CVE-2026-109997 7.2 HighOctober 31, 2026
• kstover ninja forms – contact form builder with calculators, quizzes, signatures & ai form builder Ninja Forms <= 3.15.5 - Authenticated (Subscriber+) Arbitrary Shortcode Execution via '{wp:user_display_name}' Merge Tag via display_name CVE-2026-101326 5.4 MediumOctober 31, 2026
• kstover ninja forms – contact form builder with calculators, quizzes, signatures & ai form builder Ninja Forms <= 3.15.4 - Unauthenticated Stored Cross-Site Scripting via Paragraph Text (RTE) Field Submission CVE-2026-90438 7.2 HighOctober 2, 2026
• kstover ninja forms – contact form builder with calculators, quizzes, signatures & ai form builder Ninja Forms – The Contact Form Builder That Grows With You <= 3.15.3 - Stored Cross-Site Scripting CVE-2026-94504 7.2 HighSeptember 22, 2026
• kstover ninja forms – the contact form builder that grows with you Ninja Forms <= 3.14.6 - Authenticated (Administrator+) PHP Object Injection via Form Import CVE-2026-11363 6.6 MediumSeptember 9, 2026
• kstover ninja forms – the contact form builder that grows with you Ninja Forms <= 3.15.1 - Unauthenticated Stored Cross-Site Scripting via Repeater Child 'type' Confusion via Unmatched Array Key CVE-2026-19769 7.2 HighSeptember 5, 2026
• kstover ninja forms – the contact form builder that grows with you Ninja Forms <= 3.14.9 - Authenticated (Administrator+) SQL Injection via Import File 'settings' Key CVE-2026-15663 4.9 MediumJuly 24, 2026
• kstover ninja forms – the contact form builder that grows with you Ninja Forms <= 3.14.1 - Missing Authorization to Unauthenticated Sensitive Information Disclosure via token/refresh REST Endpoint CVE-2026-1239 7.5 HighJuly 1, 2026
• kstover ninja forms – the contact form builder that grows with you Ninja Forms <= 3.14.1 - Authenticated (Contributor+) Sensitive Information Disclosure via Block Editor Token CVE-2026-1307 6.5 MediumMarch 28, 2026
• kstover ninja forms – the contact form builder that grows with you Ninja Forms <= 3.14.0 - Unauthenticated Information Disclosure in nf_ajax_submit AJAX Action CVE-2026-2268 7.5 HighFebruary 10, 2026
• kstover ninja forms – the contact form builder that grows with you, ninjaforms ninja forms +1 more Ninja Forms – The Contact Form Builder That Grows With You <= 3.13.2 - Insecure Direct Object Reference to Unauthenticated Sensitive Information Exposure via Unscoped Bearer Token CVE-2025-11924 7.5 HighDecember 17, 2025
• kstover ninja forms – the contact form builder that grows with you, ninjaforms ninja forms +1 more Ninja Forms – The Contact Form Builder That Grows With You <= 3.12.0 - Cross-Site Request Forgery to Limited File Deletion CVE-2025-10498 4.3 MediumSeptember 27, 2025
• kstover ninja forms – the contact form builder that grows with you, ninjaforms ninja forms +1 more Ninja Forms – The Contact Form Builder That Grows With You <= 3.12.0 - Cross-Site Request Forgery to Plugin Settings Update CVE-2025-10499 4.3 MediumSeptember 27, 2025
• kstover ninja forms – the contact form builder that grows with you, ninjaforms ninja forms +1 more Ninja Forms <= 3.10.2.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via CSTI CVE-2025-5398 6.4 MediumJune 27, 2025
• kstover ninja forms – the contact form builder that grows with you, ninjaforms ninja forms +1 more Ninja Forms – The Contact Form Builder That Grows With You <= 3.8.24 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode CVE-2024-13470 6.4 MediumJanuary 30, 2025
• kstover ninja forms – the contact form builder that grows with you, ninjaforms ninja forms +1 more Ninja Forms – The Contact Form Builder That Grows With You <= 3.8.22 - Authenticated (Subscriber+) Arbitrary Shortcode Execution CVE-2024-12238 6.3 MediumDecember 29, 2024
• kstover ninja forms – the contact form builder that grows with you, ninjaforms ninja forms +1 more Ninja Forms – The Contact Form Builder That Grows With You <= 3.8.19 - Unauthenticated Stored Cross-Site Scripting via Form Calculations CVE-2024-11052 7.2 HighDecember 12, 2024
• ninjaforms ninja forms, kstover ninja forms – the contact form builder that grows with you +1 more Ninja Forms Contact Form <= 3.8.15 - Reflected Self-Based Cross-Site Scripting via Referer CVE-2024-3866 4.7 MediumSeptember 25, 2024
• ninjaforms ninja forms, kstover ninja forms – the contact form builder that grows with you +1 more Ninja Forms Contact Form – The Drag and Drop Form Builder for WordPress <= 3.8.0 - Authenticated (Author+) Stored Cross-Site Scripting CVE-2024-2108 4.6 MediumMarch 29, 2024
• ninjaforms ninja forms, kstover ninja forms – the contact form builder that grows with you +1 more Ninja Forms Contact Form – The Drag and Drop Form Builder for WordPress <= 3.8.0 - Cross-Site Request Forgery to Publicly Accessible Form Submission Export CVE-2024-2113 4.3 MediumMarch 29, 2024
• ninjaforms ninja forms, kstover ninja forms – the contact form builder that grows with you +1 more Ninja Forms Contact Form <= 3.7.1 - Unauthenticated Second Order SQL Injection CVE-2024-0685 5.9 MediumFebruary 2, 2024