Login Request a demo
NF
Product
Ninja Forms
by Saturday Drive · last CVE Oct 28, 2026
15
CVEs
0
On KEV
9.8
Max CVSS
1
New 30D
Vulnerabilities15In the news0Timeline
Severity mix
Critical 4High 5Medium 6Low 0
Severity
All severities15Critical4High5Medium6Low0
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add Ninja Forms to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2024-39628
8.8
0%
Aug 26
WordPress Ninja Forms plugin <= 3.8.6 - Cross Site Request Forgery (CSRF) vulnerability
Affected: through 3.8.6
CVE-2023-38393
8.8
1%
Jun 19
WordPress Ninja Forms plugin <= 3.6.25 - Subscriber+ Broken Access Control vulnerability
Affected: through 3.6.25
CVE-2024-25572
8.8
0%
Apr 11
Cross-site request forgery (CSRF) vulnerability exists in Ninja Forms prior to 3.4.31
Affected: prior to 3.4.31
CVE-2026-65052
7.5
1%
Jul 21
Ninja Forms Calculation and Payment Total Tampering via Fail-Open get_calc_value in ListSelect and ListRadio Fields
Affected: before 3.14.9
CVE-2026-67187
New
7.1–Oct 28
Ninja Forms WordPress Plugin < 3.15.4 Server-Side Validation Bypass via List Fields
Affected: before 3.15.4
Showing 5