Ninja Forms vulnerabilities | LiveThreat CVE Feed — Verisq

Login Request a demo

NF

Product

Ninja Forms

by Kevin Stover · last CVE Oct 21, 2026

5

CVEs

0

On KEV

7.1

Max CVSS

2

New 30D

Vulnerabilities5 In the news0 Timeline

Severity mix

Critical 0High 3Medium 2Low 0

Severity

All severities5 Critical0 High3 Medium2 Low0

Exploitation

On CISA KEV0 Exploited in the wild0

Watch

Add Ninja Forms to your stack to get only the CVEs that touch what you run.

CVE	CVSS	EPSS	Published	Summary · affected versions
CVE-2026-110899	7.1	0%	Oct 21	WordPress Ninja Forms plugin <= 3.15.5 - Cross Site Scripting (XSS) vulnerability Affected: through 3.15.5
CVE-2026-102385	7.1	0%	Sep 30	WordPress Ninja Forms plugin <= 3.15.3 - Cross Site Scripting (XSS) vulnerability Affected: through 3.15.3
CVE-2026-95515	7.1	0%	Sep 23	WordPress Ninja Forms plugin <= 3.15.3 - Cross Site Scripting (XSS) vulnerability Affected: through 3.15.3
CVE-2024-50514	4.8	0%	Nov 19	WordPress Ninja Forms – The Contact Form Builder That Grows With You plugin <= 3.8.16 - Cross Site Scripting (XSS) vulnerability Affected: through 3.8.16
CVE-2024-50515	4.8	0%	Nov 19	WordPress Ninja Forms – The Contact Form Builder That Grows With You plugin <= 3.8.16 - Cross Site Scripting (XSS) vulnerability Affected: through 3.8.16