NF
Product
Ninja Forms
by Saturday Drive · last CVE Oct 28, 2026
7
CVEs
0
On KEV
9.3
Max CVSS
1
New 30D
Severity mix
Critical 2High 2Medium 3Low 0
Watch

Add Ninja Forms to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2026-65049
9.3
0%
Jul 21
Ninja Forms Cross-Site Network-Wide Data Deletion on WordPress Multisite via nf_delete_all_data AJAX Action
Affected: before 3.14.9
CVE-2026-65048
9.3
1%
Jul 21
Ninja Forms Unauthenticated Stored Cross-Site Scripting via Repeatable Fieldset Submission Index
Affected: 3.10.4 before 3.14.9
Showing 2