| CVE-2026-91827 |
The Ninja Forms WordPress plugin 3.15.3 does not prevent user-submitted form field values from being deserialised when…
|
7.5
Élevée
|
22 sept. 2026 |
| CVE-2026-92438 |
The Ninja Forms WordPress plugin 3.15.3 does not escape submitted form field values before outputting them on the…
|
8.8
Élevée
|
22 sept. 2026 |
| CVE-2026-80437 |
The Ninja Forms WordPress plugin from 3.14.10 before 3.15.2 does not prevent shortcodes in request-derived values from…
|
4.8
Moyenne
|
6 sept. 2026 |
| CVE-2026-80438 |
The Ninja Forms WordPress plugin before 3.15.2 does not restrict its REST abilities to administrators, accepting a…
|
5.9
Moyenne
|
4 sept. 2026 |
| CVE-2026-15256 |
The Ninja Forms WordPress plugin before 3.14.10 does not prevent user-supplied query-string input, used to…
|
4.8
Moyenne
|
6 août 2026 |
| CVE-2025-14072 |
The Ninja Forms WordPress plugin before 3.13.3 allows unauthenticated attackers to generate valid access tokens via the…
|
5.3
Moyenne
|
2 janv. 2026 |
| CVE-2025-9083 |
The Ninja Forms WordPress plugin before 3.11.1 unserializes user input via form field, which could allow…
|
9.8
Critique
|
18 sept. 2025 |
| CVE-2025-2561 |
The Ninja Forms WordPress plugin before 3.10.1 does not sanitise and escape some of its settings, which could allow…
|
4.8
Moyenne
|
19 mai 2025 |
| CVE-2025-2560 |
The Ninja Forms WordPress plugin before 3.10.1 does not sanitise and escape some of its settings, which could allow…
|
4.8
Moyenne
|
19 mai 2025 |
| CVE-2025-2524 |
The Ninja Forms WordPress plugin before 3.10.1 does not sanitise and escape some of its settings, which could allow…
|
4.8
Moyenne
|
19 mai 2025 |
| CVE-2024-7354 |
The Ninja Forms WordPress plugin before 3.8.11 does not escape an URL before outputting it back in an attribute,…
|
6.1
Moyenne
|
2 sept. 2024 |