Where
-Infinity
0

Trending

Last week
Last month
Last year

NinjaForms Ninja Forms WordpressNinja Forms 3.8.6-3.8.10 - Reflected XSS

Risk 27
Severity
6.1
EPSS
0.04%
First published (updated )
CVE-2024-7354

Ninja Forms Ninja FormsCSRF

Risk 77
Severity
8.8
First published (updated )
CVE-2024-25572

Ninja Forms Ninja FormsXSS

Risk 34
Severity
5.4
First published (updated )
CVE-2024-26019

Ninja Forms Ninja FormsXSS

Risk 38
Severity
6.1
First published (updated )
CVE-2024-29220

NinjaForms Ninja Forms WordpressNinja Forms < 3.6.34 - Admin+ Stored XSS

Risk 22
Severity
4.8
EPSS
1.48%
First published (updated )
CVE-2023-5530
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

NinjaForms Ninja Forms Contact Form WordpressNinja Forms < 3.6.26 - Admin+ Stored HTML Injection

Risk 29
Severity
4.8
First published (updated )
CVE-2023-4109

NinjaForms Ninja Forms WordpressNinja Forms < 3.6.22 - Reflected XSS

Risk 38
Severity
6.1
First published (updated )
CVE-2023-1835

NinjaForms Ninja Forms WordpressNinjaForms < 3.6.13 - Admin+ PHP Objection Injection

Risk 66
Severity
7.2
First published (updated )
CVE-2022-2903

NinjaForms Ninja Forms WordpressNinja Forms < 3.6.10 - Admin+ Stored Cross-Site Scripting via Import

Risk 29
Severity
4.8
First published (updated )
CVE-2021-25066

NinjaForms Ninja Forms WordpressNinja Forms < 3.6.10 - Admin+ Stored Cross-Site Scripting

Risk 29
Severity
4.8
First published (updated )
CVE-2021-25056
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

NinjaForms Ninja Forms WordpressNinja Forms < 3.6.4 - Admin+ SQL Injection

Risk 66
Severity
7.2
First published (updated )
CVE-2021-24889

NinjaForms Contact Form WordPressNinjaForms < 3.5.8.2 - Admin+ Stored Cross-Site Scripting

Risk 29
Severity
4.8
First published (updated )
CVE-2021-24381

NinjaForms Ninja Forms WordpressNinja Forms <= 3.5.7 Sensitive Information Disclosure

Risk 38
Severity
6.5
First published (updated )
CVE-2021-34647

NinjaForms Ninja Forms WordpressNinja Forms <= 3.5.7 Unprotected REST-API to Email Injection

Risk 39
Severity
6.4
First published (updated )
CVE-2021-34648

NinjaForms Ninja Forms WordpressThe Ninja Forms plugin before 3.4.28 for WordPress lacks escaping for submissions-table fields.

Risk 27
Severity
5.3
First published (updated )
CVE-2020-36173
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

NinjaForms Ninja Forms WordpressInput Validation

Risk 27
Severity
5.3
First published (updated )
CVE-2020-36175

NinjaForms Ninja Forms WordpressCSRF

Risk 37
Severity
6.5
First published (updated )
CVE-2020-36174

NinjaForms Ninja Forms WordpressXSS, CSRF

Risk 38
Severity
6.1
First published (updated )
CVE-2020-12462

NinjaForms Ninja Forms WordpressInput Validation

Risk 38
Severity
6.1
First published (updated )
CVE-2017-18574

NinjaForms Ninja Forms WordpressInput Validation

Risk 66
Severity
9.1
First published (updated )
CVE-2018-20981
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

NinjaForms Ninja Forms WordpressInput Validation

Risk 43
Severity
7.5
First published (updated )
CVE-2018-20980

NinjaForms Ninjaforms WordpressSQL Injection

Risk 86
Severity
9.8
First published (updated )
CVE-2019-15025

NinjaForms Ninja Forms File Uploads WordpressPath Traversal, Malicious File Upload

Risk 75
Severity
8.1
First published (updated )
CVE-2019-10869

NinjaForms Ninja Forms WordpressAn open redirect in the Ninja Forms plugin before 3.3.19.1 for WordPress allows Remote Attackers to …

Risk 38
Severity
6.1
First published (updated )
CVE-2018-19796

NinjaForms Ninja Forms WordpressThe Ninja Forms plugin before 3.3.14.1 for WordPress allows CSV injection.

Risk 70
Severity
8.6
First published (updated )
CVE-2018-16308
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

NinjaForms Ninja Forms WordpressInput Validation

Risk 86
Severity
9.8
First published (updated )
CVE-2016-1209

NinjaForms Ninja Forms WordpressXSS

Risk 22
Severity
4.3
First published (updated )
CVE-2015-2220

Company

Resources

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co
By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.
© 2026 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203