Login Request a demo
NF
Product
Ninja Forms
by Saturday Drive · last CVE Oct 28, 2026
15
CVEs
0
On KEV
9.8
Max CVSS
1
New 30D
Vulnerabilities15In the news0Timeline
Severity mix
Critical 4High 5Medium 6Low 0
Severity
All severities15Critical4High5Medium6Low0
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add Ninja Forms to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2026-65051
6.5
0%
Jul 21
Ninja Forms Server-Side Validation Bypass via Client-Controlled Field Metadata Merge in AJAX Submission Handler
Affected: before 3.14.9
CVE-2026-65050
6.5
0%
Jul 21
Ninja Forms Missing Authorization in submissions-table Gutenberg Block Discloses Form Submissions to Unauthenticated Visitors
Affected: before 3.14.9
CVE-2024-1596
6.1
0%
Sep 7
Ninja Forms File Uploads <= 3.3.16 - Unauthenticated Stored Cross-Site Scripting via File Upload
Affected: through 3.3.16
CVE-2024-29220
6.1
0%
Apr 11
Ninja Forms prior to 3.8.1 contains a cross-site scripting vulnerability in custom fields for labels
Affected: prior to 3.8.1
CVE-2024-26019
5.4
1%
Apr 11
Ninja Forms prior to 3.8.1 contains a cross-site scripting vulnerability in submit processing
Affected: prior to 3.8.1
CVE-2024-43999
4.8
0%
Sep 17
WordPress Ninja Forms plugin <= 3.8.11 - Cross Site Scripting (XSS) vulnerability
Affected: through 3.8.11
Showing 6