NF
Product
Ninja Forms – The Contact Form Builder That Grows With You
11
CVEs
0
On KEV
7.5
Max CVSS
0
New 30D
Severity mix
Critical 0High 4Medium 7Low 0
Watch
Add Ninja Forms – The Contact Form Builder That Grows With You to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-1239 | 7.5 | Jul 1 | Ninja Forms <= 3.14.1 - Missing Authorization to Unauthenticated Sensitive Information Disclosure via token/refresh REST Endpoint Affected: through 3.14.1 |
| CVE-2026-2268 | 7.5 | Feb 10 | Ninja Forms <= 3.14.0 - Unauthenticated Information Disclosure in nf_ajax_submit AJAX Action Affected: through 3.14.0 |
| CVE-2025-11924 | 7.5 | Dec 17 | Ninja Forms – The Contact Form Builder That Grows With You <= 3.13.2 - Insecure Direct Object Reference to Unauthenticated Sensitive Information Exposure via Unscoped Bearer Token Affected: through 3.13.2 |
| CVE-2026-19769 | 7.2 | Sep 5 | Ninja Forms <= 3.15.1 - Unauthenticated Stored Cross-Site Scripting via Repeater Child 'type' Confusion via Unmatched Array Key Affected: through 3.15.1 |
Showing 4