Skip to content
Ninjaforms Ninja Forms vulnerabilities
-
ninjaforms ninja forms
Ninja Forms < 3.13.3 - Unauthenticated Token Generation and Submission Disclosure
CVE-2025-14072
5.3 Medium
-
kstover ninja forms – the contact form builder that grows with you, ninjaforms ninja forms +1 more
Ninja Forms – The Contact Form Builder That Grows With You <= 3.13.2 - Insecure Direct Object Reference to Unauthenticated Sensitive Information Exposure via Unscoped Bearer Token
CVE-2025-11924
7.5 High
-
kstover ninja forms – the contact form builder that grows with you, ninjaforms ninja forms +1 more
Ninja Forms – The Contact Form Builder That Grows With You <= 3.12.0 - Cross-Site Request Forgery to Limited File Deletion
CVE-2025-10498
4.3 Medium
-
kstover ninja forms – the contact form builder that grows with you, ninjaforms ninja forms +1 more
Ninja Forms – The Contact Form Builder That Grows With You <= 3.12.0 - Cross-Site Request Forgery to Plugin Settings Update
CVE-2025-10499
4.3 Medium
-
ninjaforms ninja forms
Ninja-forms < 3.11.1 - Unauthenticated PHP Objection
CVE-2025-9083
9.8 Critical
-
kstover ninja forms – the contact form builder that grows with you, ninjaforms ninja forms +1 more
Ninja Forms <= 3.10.2.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via CSTI
CVE-2025-5398
6.4 Medium
-
ninjaforms ninja forms
Ninja Forms < 3.10.1 - Admin+ Stored XSS
CVE-2025-2561
4.8 Medium
-
ninjaforms ninja forms
Ninja Forms < 3.10.1 - Admin+ Stored XSS
CVE-2025-2560
4.8 Medium
-
ninjaforms ninja forms
Ninja Forms < 3.10.1 - Admin+ Stored XSS
CVE-2025-2524
4.8 Medium
-
kstover ninja forms – the contact form builder that grows with you, ninjaforms ninja forms +1 more
Ninja Forms – The Contact Form Builder That Grows With You <= 3.8.24 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
CVE-2024-13470
6.4 Medium
-
kstover ninja forms – the contact form builder that grows with you, ninjaforms ninja forms +1 more
Ninja Forms – The Contact Form Builder That Grows With You <= 3.8.22 - Authenticated (Subscriber+) Arbitrary Shortcode Execution
CVE-2024-12238
6.3 Medium
-
kstover ninja forms – the contact form builder that grows with you, ninjaforms ninja forms +1 more
Ninja Forms – The Contact Form Builder That Grows With You <= 3.8.19 - Unauthenticated Stored Cross-Site Scripting via Form Calculations
CVE-2024-11052
7.2 High
-
kevin stover ninja forms
WordPress Ninja Forms – The Contact Form Builder That Grows With You plugin <= 3.8.16 - Cross Site Scripting (XSS) vulnerability
CVE-2024-50514
5.9 Medium
-
kevin stover ninja forms
WordPress Ninja Forms – The Contact Form Builder That Grows With You plugin <= 3.8.16 - Cross Site Scripting (XSS) vulnerability
CVE-2024-50515
5.9 Medium
-
ninjaforms ninja forms, kstover ninja forms – the contact form builder that grows with you +1 more
Ninja Forms Contact Form <= 3.8.15 - Reflected Self-Based Cross-Site Scripting via Referer
CVE-2024-3866
4.7 Medium
-
ninjaforms ninja forms
WordPress Ninja Forms plugin <= 3.8.11 - Cross Site Scripting (XSS) vulnerability
CVE-2024-43999
5.9 Medium
-
ninjaforms ninja forms file uploads, saturday drive ninja forms, saturdaydrive ninja forms - file uploads +2 more
Ninja Forms File Uploads <= 3.3.16 - Unauthenticated Stored Cross-Site Scripting via File Upload
CVE-2024-1596
7.2 High
-
ninjaforms ninja forms
Ninja Forms 3.8.6-3.8.10 - Reflected XSS
CVE-2024-7354
6.1 Medium
-
ninjaforms ninja forms
WordPress Ninja Forms plugin <= 3.8.6 - Cross Site Request Forgery (CSRF) vulnerability
CVE-2024-39628
5.4 Medium
-
ninjaforms ninja forms
WordPress Ninja Forms plugin <= 3.8.4 - Subscriber+ Arbitrary Shortcode Execution vulnerability
CVE-2024-37934
5.4 Medium
-
ninjaforma ninja forms
WordPress Ninja Forms plugin <= 3.6.25 - Subscriber+ Broken Access Control vulnerability
CVE-2023-38393
7.6 High
-
ninjaforms ninja forms
WordPress Ninja Forms plugin <= 3.6.25 - Contributor+ Broken Access Control vulnerability
CVE-2023-38386
7.6 High
-
ninjaforms ninja forms, saturday drive ninja forms contact form +1 more
WordPress Ninja Forms Plugin <= 3.6.24 is vulnerable to Arbitrary File Deletion
CVE-2023-36505
6.8 Medium
-
ninjaforms ninja forms
Cross-site request forgery (CSRF) vulnerability exists in Ninja Forms prior to 3.4.31. If a...
CVE-2024-25572
8.8 High
-
ninjaforms ninja forms
Ninja Forms prior to 3.8.1 contains a cross-site scripting vulnerability in submit processing. If...
CVE-2024-26019
5.4 Medium
-
ninjaforms ninja forms
Ninja Forms prior to 3.8.1 contains a cross-site scripting vulnerability in custom fields for...
CVE-2024-29220
6.1 Medium
-
ninjaforms ninja forms, kstover ninja forms – the contact form builder that grows with you +1 more
Ninja Forms Contact Form – The Drag and Drop Form Builder for WordPress <= 3.8.0 - Authenticated (Author+) Stored Cross-Site Scripting
CVE-2024-2108
4.6 Medium
-
ninjaforms ninja forms, kstover ninja forms – the contact form builder that grows with you +1 more
Ninja Forms Contact Form – The Drag and Drop Form Builder for WordPress <= 3.8.0 - Cross-Site Request Forgery to Publicly Accessible Form Submission Export
CVE-2024-2113
4.3 Medium
-
ninjaforms ninja forms, kstover ninja forms – the contact form builder that grows with you +1 more
Ninja Forms Contact Form <= 3.7.1 - Unauthenticated Second Order SQL Injection
CVE-2024-0685
5.9 Medium
-
ninjaforms ninja forms, saturday drive ninja forms contact form – the drag and drop form builder for wordpress +1 more
WordPress Ninja Forms Plugin <= 3.6.25 is vulnerable to Denial of Service Attack
CVE-2023-35909
5.3 Medium
-
ninjaforms ninja forms, unknown ninja forms contact form +1 more
Ninja Forms < 3.6.34 - Admin+ Stored XSS
CVE-2023-5530
4.8 Medium
-
ninjaforms ninja forms contact form
Ninja Forms < 3.6.26 - Admin+ Stored HTML Injection
CVE-2023-4109
4.8 Medium
-
ninjaforms ninja forms, saturday drive ninja forms contact form +1 more
WordPress Ninja Forms Plugin <= 3.6.25 is vulnerable to Cross Site Scripting (XSS)
CVE-2023-37979
Public exploit
7.1 High
-
ninjaforms ninja forms, unknown ninja forms contact form +1 more
Ninja Forms < 3.6.22 - Reflected XSS
CVE-2023-1835
6.1 Medium
-
ninjaforms ninja forms, unknown ninja forms contact form – the drag and drop form builder for wordpress +1 more
NinjaForms < 3.6.13 - Admin+ PHP Objection Injection
CVE-2022-2903
7.2 High
-
ninjaforms ninja forms, unknown ninja forms contact form – the drag and drop form builder for wordpress +1 more
Ninja Forms < 3.6.10 - Admin+ Stored Cross-Site Scripting via Import
CVE-2021-25066
4.8 Medium
-
ninjaforms ninja forms, unknown ninja forms contact form – the drag and drop form builder for wordpress +1 more
Ninja Forms < 3.6.10 - Admin+ Stored Cross-Site Scripting
CVE-2021-25056
4.8 Medium
-
ninjaforms ninja forms, saturday drive ninja forms contact form (wordpress plugin) +1 more
WordPress Ninja Forms Contact Form plugin <= 3.6.9 - Authenticated Stored Cross-Site Scripting (XSS) vulnerability
CVE-2021-36827
4.8 Medium
-
saturdaydrive ninja forms - file uploads, ninjaforms ninja forms file uploads +1 more
Ninja Forms - File Uploads Extension <= 3.3.0 - Arbitrary File Upload
CVE-2022-0888
EPSS 39.4%
9.8 Critical
-
saturdaydrive ninja forms - file uploads, ninjaforms ninja forms file uploads +1 more
Ninja Forms - File Uploads Extension <= 3.3.12 - Reflected Cross-Site Scripting
CVE-2022-0889
7.2 High
-
ninjaforms ninja forms, unknown ninja forms contact form – the drag and drop form builder for wordpress +1 more
Ninja Forms < 3.6.4 - Admin+ SQL Injection
CVE-2021-24889
7.2 High
-
ninjaforms ninja forms
Ninja Forms <= 3.5.7 Sensitive Information Disclosure
CVE-2021-34647
6.5 Medium
-
ninjaforms ninja forms
Ninja Forms <= 3.5.7 Unprotected REST-API to Email Injection
CVE-2021-34648
6.4 Medium
-
ninjaforms ninja forms, unknown ninja forms contact form – the drag and drop form builder for wordpress +1 more
Ninja Forms < 3.4.34 - CSRF to OAuth Service Disconnection
CVE-2021-24166
5.4 Medium
-
ninjaforms ninja forms, unknown ninja forms contact form – the drag and drop form builder for wordpress +1 more
Ninja Forms < 3.4.34 - Administrator Open Redirect
CVE-2021-24165
6.1 Medium
-
ninjaforms ninja forms, unknown ninja forms contact form – the drag and drop form builder for wordpress +1 more
Ninja Forms < 3.4.34.1 - Authenticated OAuth Connection Key Disclosure
CVE-2021-24164
4.3 Medium
-
ninjaforms ninja forms, unknown ninja forms contact form – the drag and drop form builder for wordpress +1 more
Ninja Forms < 3.4.34 - Authenticated SendWP Plugin Installation and Client Secret Key Disclosure
CVE-2021-24163
8.8 High
-
ninjaforms ninja forms
The Ninja Forms plugin before 3.4.28 for WordPress lacks escaping for submissions-table fields.
CVE-2020-36173
5.3 Medium
-
ninjaforms ninja forms
The Ninja Forms plugin before 3.4.27.1 for WordPress allows attackers to bypass validation via...
CVE-2020-36175
5.3 Medium
-
ninjaforms ninja forms
The Ninja Forms plugin before 3.4.27.1 for WordPress allows CSRF via services integration.
CVE-2020-36174
6.5 Medium
- Show olderLoading…