CoreCVE

CVE Browser

Search and filter CVEs by severity, ecosystem, EPSS score, and more.

Today 49Last 7 days 2,679Total CVEs 401,289CISA KEV 1,733Critical 42,407 All stats
Clear
More filters (active)
Filters: Vendor: Ninjaforms Remove filter Clear all

Page 1 (more results available)

CVE-2026-57784 CRITICAL

WordPress Ninja Forms File Uploads Extension plugin <= 3.3.26 - Cross Site Request Forgery (CSRF) vulnerability

CVSS 9.6 EPSS 0.20% Jul 23, 2026
CVE-2025-14072 MEDIUM

Ninja Forms < 3.13.3 - Unauthenticated Token Generation and Submission Disclosure

CVSS 5.3 EPSS 0.35% Jan 2, 2026
CVE-2025-11924 HIGH

Ninja Forms – The Contact Form Builder That Grows With You <= 3.13.2 - Insecure Direct Object Reference to Unauthenticated Sensitive Information Exposure via U…

CVSS 7.5 EPSS 0.44% Dec 17, 2025
CVE-2025-10498 MEDIUM

Ninja Forms – The Contact Form Builder That Grows With You <= 3.12.0 - Cross-Site Request Forgery to Limited File Deletion

CVSS 5.4 EPSS 0.16% Sep 27, 2025
CVE-2025-10499 MEDIUM

Ninja Forms – The Contact Form Builder That Grows With You <= 3.12.0 - Cross-Site Request Forgery to Plugin Settings Update

CVSS 4.3 EPSS 0.16% Sep 27, 2025
CVE-2025-9083 CRITICAL

Ninja-forms < 3.11.1 - Unauthenticated PHP Objection

CVSS 9.8 EPSS 0.54% Sep 18, 2025
CVE-2025-5398 MEDIUM

Ninja Forms <= 3.10.2.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via CSTI

CVSS 6.4 EPSS 0.24% Jun 27, 2025
CVE-2025-2561 MEDIUM

Ninja Forms < 3.10.1 - Admin+ Stored XSS

CVSS 4.8 EPSS 0.25% May 19, 2025
CVE-2025-2560 MEDIUM

Ninja Forms < 3.10.1 - Admin+ Stored XSS

CVSS 4.8 EPSS 0.25% May 19, 2025
CVE-2025-2524 MEDIUM

Ninja Forms < 3.10.1 - Admin+ Stored XSS

CVSS 4.8 EPSS 0.30% May 19, 2025
CVE-2024-13940 MEDIUM

Ninja Forms Webhooks <= 3.0.7 - Authenticated (Admin+) Server-Side Request Forgery via Form Webhook

CVSS 5.5 EPSS 0.24% May 14, 2025
CVE-2024-13470 MEDIUM

Ninja Forms – The Contact Form Builder That Grows With You <= 3.8.24 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode

CVSS 6.4 EPSS 0.31% Jan 30, 2025
CVE-2024-12238 MEDIUM

Ninja Forms – The Contact Form Builder That Grows With You <= 3.8.22 - Authenticated (Subscriber+) Arbitrary Shortcode Execution

CVSS 6.3 EPSS 0.47% Dec 29, 2024
CVE-2024-11052 HIGH

Ninja Forms – The Contact Form Builder That Grows With You <= 3.8.19 - Unauthenticated Stored Cross-Site Scripting via Form Calculations

CVSS 7.2 EPSS 0.32% Dec 12, 2024
CVE-2024-50514 MEDIUM

WordPress Ninja Forms – The Contact Form Builder That Grows With You plugin <= 3.8.16 - Cross Site Scripting (XSS) vulnerability

CVSS 5.9 EPSS 0.39% Nov 19, 2024
CVE-2024-50515 MEDIUM

WordPress Ninja Forms – The Contact Form Builder That Grows With You plugin <= 3.8.16 - Cross Site Scripting (XSS) vulnerability

CVSS 5.9 EPSS 0.39% Nov 19, 2024
CVE-2024-3866 MEDIUM

Ninja Forms Contact Form <= 3.8.15 - Reflected Self-Based Cross-Site Scripting via Referer

CVSS 6.1 EPSS 0.29% Sep 25, 2024
CVE-2024-43999 MEDIUM

WordPress Ninja Forms plugin <= 3.8.11 - Cross Site Scripting (XSS) vulnerability

CVSS 5.9 EPSS 0.31% Sep 17, 2024
CVE-2024-1596 HIGH

Ninja Forms File Uploads <= 3.3.16 - Unauthenticated Stored Cross-Site Scripting via File Upload

CVSS 7.2 EPSS 0.43% Sep 7, 2024
CVE-2024-7354 MEDIUM

Ninja Forms 3.8.6-3.8.10 - Reflected XSS

CVSS 6.1 EPSS 0.70% Sep 2, 2024
CVE-2024-39628 HIGH

WordPress Ninja Forms plugin <= 3.8.6 - Cross Site Request Forgery (CSRF) vulnerability

CVSS 8.8 EPSS 0.20% Aug 26, 2024
CVE-2024-37934 CRITICAL

WordPress Ninja Forms plugin <= 3.8.4 - Subscriber+ Arbitrary Shortcode Execution vulnerability

CVSS 9.8 EPSS 0.47% Jul 9, 2024
CVE-2023-38393 HIGH

WordPress Ninja Forms plugin <= 3.6.25 - Subscriber+ Broken Access Control vulnerability

CVSS 8.8 EPSS 0.54% Jun 19, 2024
CVE-2023-38386 CRITICAL

WordPress Ninja Forms plugin <= 3.6.25 - Contributor+ Broken Access Control vulnerability

CVSS 9.8 EPSS 0.50% Jun 19, 2024
CVE-2023-36505 HIGH

WordPress Ninja Forms Plugin <= 3.6.24 is vulnerable to Arbitrary File Deletion

CVSS 7.2 EPSS 0.60% Apr 17, 2024

Showing 1 to 25 CVEs · page 1 (more available)