NF
Product
Ninja Forms
by · last CVE Sep 22, 2026
11
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 1High 2Medium 8Low 0
Watch

Add Ninja Forms to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2026-92438
8.8
0%
Sep 22
Ninja Forms 3.15.3 - Unauthenticated Stored XSS via Paragraph Text Field in Submissions Admin
Affected: 3.15.3 before 3.15.4
CVE-2026-91827
7.5
0%
Sep 22
Ninja Forms 3.15.3 - Unauthenticated PHP Object Injection via CSV Export
Affected: 3.15.3 before 3.15.4
Showing 2