Skip to contentKstover Ninja Forms – Contact Form Builder With Calculators, Quizzes, Signatures & Ai Form Builder vulnerabilities
- kstover ninja forms – contact form builder with calculators, quizzes, signatures & ai form builderNinja Forms <= 3.15.5 - Reflected DOM-Based Cross-Site Scripting via 'querystring:<key>' URL ParameterCVE-2026-1001516.1 Medium
- kstover ninja forms – contact form builder with calculators, quizzes, signatures & ai form builderNinja Forms <= 3.15.5 - Unauthenticated Arbitrary Shortcode Execution via 'formData' Field Value via Success Message Merge TagCVE-2026-1001556.5 Medium
- kstover ninja forms – contact form builder with calculators, quizzes, signatures & ai form builderNinja Forms <= 3.15.5 - Unauthenticated Stored Cross-Site Scripting via 'extra' Parameter via Metadata Key NormalizationCVE-2026-1099977.2 High
- kstover ninja forms – contact form builder with calculators, quizzes, signatures & ai form builderNinja Forms <= 3.15.5 - Authenticated (Subscriber+) Arbitrary Shortcode Execution via '{wp:user_display_name}' Merge Tag via display_nameCVE-2026-1013265.4 Medium
- kstover ninja forms – contact form builder with calculators, quizzes, signatures & ai form builderNinja Forms <= 3.15.4 - Unauthenticated Stored Cross-Site Scripting via Paragraph Text (RTE) Field SubmissionCVE-2026-904387.2 High
- kstover ninja forms – contact form builder with calculators, quizzes, signatures & ai form builderNinja Forms – The Contact Form Builder That Grows With You <= 3.15.3 - Stored Cross-Site ScriptingCVE-2026-945047.2 High