Ninjaforms vulnerabilities

Products

• Ninja Forms 57
• Ninja Forms File Uploads 4

Newest

• ninjaforms ninja forms Ninja Forms < 3.13.3 - Unauthenticated Token Generation and Submission Disclosure CVE-2025-14072 5.3 MediumJanuary 2, 2026
• kstover ninja forms – the contact form builder that grows with you, ninjaforms ninja forms +1 more Ninja Forms – The Contact Form Builder That Grows With You <= 3.13.2 - Insecure Direct Object Reference to Unauthenticated Sensitive Information Exposure via Unscoped Bearer Token CVE-2025-11924 7.5 HighDecember 17, 2025
• kstover ninja forms – the contact form builder that grows with you, ninjaforms ninja forms +1 more Ninja Forms – The Contact Form Builder That Grows With You <= 3.12.0 - Cross-Site Request Forgery to Limited File Deletion CVE-2025-10498 4.3 MediumSeptember 27, 2025
• kstover ninja forms – the contact form builder that grows with you, ninjaforms ninja forms +1 more Ninja Forms – The Contact Form Builder That Grows With You <= 3.12.0 - Cross-Site Request Forgery to Plugin Settings Update CVE-2025-10499 4.3 MediumSeptember 27, 2025
• ninjaforms ninja forms Ninja-forms < 3.11.1 - Unauthenticated PHP Objection CVE-2025-9083 9.8 CriticalSeptember 18, 2025
• kstover ninja forms – the contact form builder that grows with you, ninjaforms ninja forms +1 more Ninja Forms <= 3.10.2.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via CSTI CVE-2025-5398 6.4 MediumJune 27, 2025
• ninjaforms ninja forms Ninja Forms < 3.10.1 - Admin+ Stored XSS CVE-2025-2561 4.8 MediumMay 19, 2025
• ninjaforms ninja forms Ninja Forms < 3.10.1 - Admin+ Stored XSS CVE-2025-2560 4.8 MediumMay 19, 2025
• ninjaforms ninja forms Ninja Forms < 3.10.1 - Admin+ Stored XSS CVE-2025-2524 4.8 MediumMay 19, 2025
• kstover ninja forms – the contact form builder that grows with you, ninjaforms ninja forms +1 more Ninja Forms – The Contact Form Builder That Grows With You <= 3.8.24 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode CVE-2024-13470 6.4 MediumJanuary 30, 2025
• kstover ninja forms – the contact form builder that grows with you, ninjaforms ninja forms +1 more Ninja Forms – The Contact Form Builder That Grows With You <= 3.8.22 - Authenticated (Subscriber+) Arbitrary Shortcode Execution CVE-2024-12238 6.3 MediumDecember 29, 2024
• kstover ninja forms – the contact form builder that grows with you, ninjaforms ninja forms +1 more Ninja Forms – The Contact Form Builder That Grows With You <= 3.8.19 - Unauthenticated Stored Cross-Site Scripting via Form Calculations CVE-2024-11052 7.2 HighDecember 12, 2024
• kevin stover ninja forms WordPress Ninja Forms – The Contact Form Builder That Grows With You plugin <= 3.8.16 - Cross Site Scripting (XSS) vulnerability CVE-2024-50514 5.9 MediumNovember 19, 2024
• kevin stover ninja forms WordPress Ninja Forms – The Contact Form Builder That Grows With You plugin <= 3.8.16 - Cross Site Scripting (XSS) vulnerability CVE-2024-50515 5.9 MediumNovember 19, 2024
• ninjaforms ninja forms, kstover ninja forms – the contact form builder that grows with you +1 more Ninja Forms Contact Form <= 3.8.15 - Reflected Self-Based Cross-Site Scripting via Referer CVE-2024-3866 4.7 MediumSeptember 25, 2024
• ninjaforms ninja forms WordPress Ninja Forms plugin <= 3.8.11 - Cross Site Scripting (XSS) vulnerability CVE-2024-43999 5.9 MediumSeptember 17, 2024
• ninjaforms ninja forms file uploads, saturday drive ninja forms, saturdaydrive ninja forms - file uploads +2 more Ninja Forms File Uploads <= 3.3.16 - Unauthenticated Stored Cross-Site Scripting via File Upload CVE-2024-1596 7.2 HighSeptember 7, 2024
• ninjaforms ninja forms Ninja Forms 3.8.6-3.8.10 - Reflected XSS CVE-2024-7354 6.1 MediumSeptember 2, 2024
• ninjaforms ninja forms WordPress Ninja Forms plugin <= 3.8.6 - Cross Site Request Forgery (CSRF) vulnerability CVE-2024-39628 5.4 MediumAugust 26, 2024
• ninjaforms ninja forms WordPress Ninja Forms plugin <= 3.8.4 - Subscriber+ Arbitrary Shortcode Execution vulnerability CVE-2024-37934 5.4 MediumJuly 9, 2024
• ninjaforma ninja forms WordPress Ninja Forms plugin <= 3.6.25 - Subscriber+ Broken Access Control vulnerability CVE-2023-38393 7.6 HighJune 19, 2024
• ninjaforms ninja forms WordPress Ninja Forms plugin <= 3.6.25 - Contributor+ Broken Access Control vulnerability CVE-2023-38386 7.6 HighJune 19, 2024
• ninjaforms ninja forms, saturday drive ninja forms contact form +1 more WordPress Ninja Forms Plugin <= 3.6.24 is vulnerable to Arbitrary File Deletion CVE-2023-36505 6.8 MediumApril 17, 2024
• ninjaforms ninja forms Cross-site request forgery (CSRF) vulnerability exists in Ninja Forms prior to 3.4.31. If a... CVE-2024-25572 8.8 HighApril 11, 2024
• ninjaforms ninja forms Ninja Forms prior to 3.8.1 contains a cross-site scripting vulnerability in submit processing. If... CVE-2024-26019 5.4 MediumApril 11, 2024
• ninjaforms ninja forms Ninja Forms prior to 3.8.1 contains a cross-site scripting vulnerability in custom fields for... CVE-2024-29220 6.1 MediumApril 11, 2024
• ninjaforms ninja forms, kstover ninja forms – the contact form builder that grows with you +1 more Ninja Forms Contact Form – The Drag and Drop Form Builder for WordPress <= 3.8.0 - Authenticated (Author+) Stored Cross-Site Scripting CVE-2024-2108 4.6 MediumMarch 29, 2024
• ninjaforms ninja forms, kstover ninja forms – the contact form builder that grows with you +1 more Ninja Forms Contact Form – The Drag and Drop Form Builder for WordPress <= 3.8.0 - Cross-Site Request Forgery to Publicly Accessible Form Submission Export CVE-2024-2113 4.3 MediumMarch 29, 2024
• ninjaforms ninja forms, kstover ninja forms – the contact form builder that grows with you +1 more Ninja Forms Contact Form <= 3.7.1 - Unauthenticated Second Order SQL Injection CVE-2024-0685 5.9 MediumFebruary 2, 2024
• ninjaforms ninja forms, saturday drive ninja forms contact form – the drag and drop form builder for wordpress +1 more WordPress Ninja Forms Plugin <= 3.6.25 is vulnerable to Denial of Service Attack CVE-2023-35909 5.3 MediumDecember 7, 2023
• ninjaforms ninja forms, unknown ninja forms contact form +1 more Ninja Forms < 3.6.34 - Admin+ Stored XSS CVE-2023-5530 4.8 MediumNovember 6, 2023
• ninjaforms ninja forms contact form Ninja Forms < 3.6.26 - Admin+ Stored HTML Injection CVE-2023-4109 4.8 MediumAugust 30, 2023
• ninjaforms ninja forms, saturday drive ninja forms contact form +1 more WordPress Ninja Forms Plugin <= 3.6.25 is vulnerable to Cross Site Scripting (XSS) CVE-2023-37979 Public exploit 7.1 HighJuly 27, 2023
• ninjaforms ninja forms, unknown ninja forms contact form +1 more Ninja Forms < 3.6.22 - Reflected XSS CVE-2023-1835 6.1 MediumMay 15, 2023
• ninjaforms ninja forms, unknown ninja forms contact form – the drag and drop form builder for wordpress +1 more NinjaForms < 3.6.13 - Admin+ PHP Objection Injection CVE-2022-2903 7.2 HighSeptember 26, 2022
• ninjaforms ninja forms, unknown ninja forms contact form – the drag and drop form builder for wordpress +1 more Ninja Forms < 3.6.10 - Admin+ Stored Cross-Site Scripting via Import CVE-2021-25066 4.8 MediumJuly 4, 2022
• ninjaforms ninja forms, unknown ninja forms contact form – the drag and drop form builder for wordpress +1 more Ninja Forms < 3.6.10 - Admin+ Stored Cross-Site Scripting CVE-2021-25056 4.8 MediumJuly 4, 2022
• ninjaforms ninja forms, saturday drive ninja forms contact form (wordpress plugin) +1 more WordPress Ninja Forms Contact Form plugin <= 3.6.9 - Authenticated Stored Cross-Site Scripting (XSS) vulnerability CVE-2021-36827 4.8 MediumJune 16, 2022
• saturdaydrive ninja forms - file uploads, ninjaforms ninja forms file uploads +1 more Ninja Forms - File Uploads Extension <= 3.3.0 - Arbitrary File Upload CVE-2022-0888 EPSS 39.4% 9.8 CriticalMarch 23, 2022
• saturdaydrive ninja forms - file uploads, ninjaforms ninja forms file uploads +1 more Ninja Forms - File Uploads Extension <= 3.3.12 - Reflected Cross-Site Scripting CVE-2022-0889 7.2 HighMarch 23, 2022
• ninjaforms ninja forms, unknown ninja forms contact form – the drag and drop form builder for wordpress +1 more Ninja Forms < 3.6.4 - Admin+ SQL Injection CVE-2021-24889 7.2 HighNovember 29, 2021
• ninjaforms contact form, unknown ninja forms contact form – the drag and drop form builder for wordpress +1 more NinjaForms < 3.5.8.2 - Admin+ Stored Cross-Site Scripting CVE-2021-24381 4.8 MediumOctober 25, 2021
• ninjaforms ninja forms Ninja Forms <= 3.5.7 Sensitive Information Disclosure CVE-2021-34647 6.5 MediumSeptember 22, 2021
• ninjaforms ninja forms Ninja Forms <= 3.5.7 Unprotected REST-API to Email Injection CVE-2021-34648 6.4 MediumSeptember 22, 2021
• ninjaforms ninja forms, unknown ninja forms contact form – the drag and drop form builder for wordpress +1 more Ninja Forms < 3.4.34 - CSRF to OAuth Service Disconnection CVE-2021-24166 5.4 MediumApril 5, 2021
• ninjaforms ninja forms, unknown ninja forms contact form – the drag and drop form builder for wordpress +1 more Ninja Forms < 3.4.34 - Administrator Open Redirect CVE-2021-24165 6.1 MediumApril 5, 2021
• ninjaforms ninja forms, unknown ninja forms contact form – the drag and drop form builder for wordpress +1 more Ninja Forms < 3.4.34.1 - Authenticated OAuth Connection Key Disclosure CVE-2021-24164 4.3 MediumApril 5, 2021
• ninjaforms ninja forms, unknown ninja forms contact form – the drag and drop form builder for wordpress +1 more Ninja Forms < 3.4.34 - Authenticated SendWP Plugin Installation and Client Secret Key Disclosure CVE-2021-24163 8.8 HighApril 5, 2021
• ninjaforms ninja forms The Ninja Forms plugin before 3.4.28 for WordPress lacks escaping for submissions-table fields. CVE-2020-36173 5.3 MediumJanuary 6, 2021
• ninjaforms ninja forms The Ninja Forms plugin before 3.4.27.1 for WordPress allows attackers to bypass validation via... CVE-2020-36175 5.3 MediumJanuary 6, 2021
• Show olderLoading…