Skip to contentSaturday Drive Ninja Forms vulnerabilities
- saturday drive ninja formsNinja Forms WordPress Plugin < 3.15.4 Server-Side Validation Bypass via List FieldsCVE-2026-671875.1 Medium
- saturday drive ninja forms - scheduled exportsNinja Forms - Scheduled Exports <= 3.0.3 - Authenticated (Subscriber+) Stored Cross-Site Scripting via REST API ParametersCVE-2026-878706.4 Medium
- saturday drive ninja forms - save progressNinja Forms - Save Progress <= 3.0.30 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Data Deletion via admin-ajax.php with admin_init HookCVE-2026-155504.3 Medium
- ninja forms file uploads extension, saturday drive ninja forms file uploads extension +1 moreWordPress Ninja Forms File Uploads Extension plugin <= 3.3.26 - Cross Site Scripting (XSS) vulnerabilityCVE-2026-817737.1 High
- saturday drive ninja forms - layout & stylesWordPress Ninja Forms - Layout & Styles plugin <= 3.0.31 - PHP Object Injection vulnerabilityCVE-2026-817728.8 High
- saturday drive ninja formsNinja Forms Calculation and Payment Total Tampering via Fail-Open get_calc_value in ListSelect and ListRadio FieldsCVE-2026-650528.7 High
- saturday drive ninja formsNinja Forms Server-Side Validation Bypass via Client-Controlled Field Metadata Merge in AJAX Submission HandlerCVE-2026-650516.9 Medium
- saturday drive ninja formsNinja Forms Missing Authorization in submissions-table Gutenberg Block Discloses Form Submissions to Unauthenticated VisitorsCVE-2026-650507.1 High
- saturday drive ninja formsNinja Forms Cross-Site Network-Wide Data Deletion on WordPress Multisite via nf_delete_all_data AJAX ActionCVE-2026-650498.4 High
- saturday drive ninja formsNinja Forms Unauthenticated Stored Cross-Site Scripting via Repeatable Fieldset Submission IndexCVE-2026-650489.3 Critical
- ninjaforms ninja formsWordPress Ninja Forms plugin <= 3.8.11 - Cross Site Scripting (XSS) vulnerabilityCVE-2024-439995.9 Medium
- ninjaforms ninja formsWordPress Ninja Forms plugin <= 3.8.6 - Cross Site Request Forgery (CSRF) vulnerabilityCVE-2024-396285.4 Medium
- ninjaforms ninja formsWordPress Ninja Forms plugin <= 3.8.4 - Subscriber+ Arbitrary Shortcode Execution vulnerabilityCVE-2024-379345.4 Medium
- ninjaforma ninja formsWordPress Ninja Forms plugin <= 3.6.25 - Subscriber+ Broken Access Control vulnerabilityCVE-2023-383937.6 High
- ninjaforms ninja formsWordPress Ninja Forms plugin <= 3.6.25 - Contributor+ Broken Access Control vulnerabilityCVE-2023-383867.6 High
- ninjaforms ninja forms, saturday drive ninja forms contact form +1 moreWordPress Ninja Forms Plugin <= 3.6.24 is vulnerable to Arbitrary File DeletionCVE-2023-365056.8 Medium
- ninjaforms ninja formsCross-site request forgery (CSRF) vulnerability exists in Ninja Forms prior to 3.4.31. If a...CVE-2024-255728.8 High
- ninjaforms ninja formsNinja Forms prior to 3.8.1 contains a cross-site scripting vulnerability in submit processing. If...CVE-2024-260195.4 Medium
- ninjaforms ninja formsNinja Forms prior to 3.8.1 contains a cross-site scripting vulnerability in custom fields for...CVE-2024-292206.1 Medium
- ninjaforms ninja forms, saturday drive ninja forms contact form – the drag and drop form builder for wordpress +1 moreWordPress Ninja Forms Plugin <= 3.6.25 is vulnerable to Denial of Service AttackCVE-2023-359095.3 Medium
- ninjaforms ninja forms, saturday drive ninja forms contact form +1 moreWordPress Ninja Forms Plugin <= 3.6.25 is vulnerable to Cross Site Scripting (XSS)CVE-2023-37979Public exploit7.1 High
- ninjaforms ninja forms, saturday drive ninja forms contact form (wordpress plugin) +1 moreWordPress Ninja Forms Contact Form plugin <= 3.6.9 - Authenticated Stored Cross-Site Scripting (XSS) vulnerabilityCVE-2021-368274.8 Medium
- ninjaforms ninja formsNinja Forms <= 3.5.7 Sensitive Information DisclosureCVE-2021-346476.5 Medium
- ninjaforms ninja formsNinja Forms <= 3.5.7 Unprotected REST-API to Email InjectionCVE-2021-346486.4 Medium