CVE-2026-110378: WordPress Ninja Forms Signature Contract Add-On plugin <= 3.2.5 - Broken Access Control vulnerability

Q: Which installations are affected?

The issue affects WP E-Signature Ninja Forms Signature Contract Add-On versions through 3.2.5. The available data does not identify a lower affected version boundary.

Q: Does exploitation require authentication or user interaction?

No. The supplied vector indicates network-based exploitation with low attack complexity, no privileges required, and no user interaction required.

Q: What is the expected impact?

The vulnerability is rated medium severity with a 5.3 score. It may allow low-level confidentiality impact; integrity and availability impact are listed as none.

Published Oct 15, 2026

Updated

Missing Authorization vulnerability in WP E-Signature Ninja Forms Signature Contract Add-On ninja-signature-contract-forms-add-on allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Ninja Forms Signature Contract Add-On: from n/a through 3.2.5.

Affected Software

1 affected component

WP E-Signature Ninja Forms Signature Contract Add-On<=3.2.5

Remediation

Recommended actions to resolve this vulnerability, in priority order.

Upgrade
Upgrade ninja-signature-contract-forms-add-on to a version that resolves this vulnerability.
Fixed in 3.2.5.1

Event History

Oct 15, 2026

CVE Published

via MITRE·06:07 PM

Data Sourced

via MITRE·06:07 PM

RemedyDescriptionSeverityWeakness

Frequently Asked Questions

Which installations are affected?

The issue affects WP E-Signature Ninja Forms Signature Contract Add-On versions through 3.2.5. The available data does not identify a lower affected version boundary.

Does exploitation require authentication or user interaction?

No. The supplied vector indicates network-based exploitation with low attack complexity, no privileges required, and no user interaction required.

What is the expected impact?

The vulnerability is rated medium severity with a 5.3 score. It may allow low-level confidentiality impact; integrity and availability impact are listed as none.

CVE-2026-110378: WordPress Ninja Forms Signature Contract Add-On plugin <= 3.2.5 - Broken Access Control vulnerability

Affected Software

Remediation

Event History

Frequently Asked Questions

Which installations are affected?

Does exploitation require authentication or user interaction?

What is the expected impact?

Company

Resources

Contact

Frequently Asked Questions

Which installations are affected?

Does exploitation require authentication or user interaction?

What is the expected impact?