Vulnerabilities

TI-2026-78625 CVE-2026-110899 · GHSA-ww28-j4j5-3mp6

Stored XSS in WordPress Ninja Forms plugin

LOW 31

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Kevin Stover Ninja Forms ninja-forms allows Stored XSS.This issue affects Ninja Forms: from n/a through 3.15.5.

CVSS 3.1HIGH 7.1 Network No auth User interaction EPSS 0.00215 Published 2026-10-21 No fix listed CWE-79

TI-2026-65380 CVE-2026-102385 · GHSA-45xc-76g4-jjx3

WordPress Ninja Forms plugin <= 3.15.3 - Cross Site Scripting (XSS) vulnerability

LOW 30

Unauthenticated Cross Site Scripting (XSS) in Ninja Forms <= 3.15.3 versions.

CVSS 3.1HIGH 7.1 Network No auth User interaction EPSS 0.00175 Published 2026-09-30 No fix listed CWE-79

TI-2026-63630 CVE-2026-95515 · GHSA-fv67-37ph-mj67

WordPress Ninja Forms plugin <= 3.15.3 - Cross Site Scripting (XSS) vulnerability

LOW 31

Unauthenticated Cross Site Scripting (XSS) in Ninja Forms <= 3.15.3 versions.

CVSS 3.1HIGH 7.1 Network No auth User interaction EPSS 0.00195 Published 2026-09-23 No fix listed CWE-79

Vulnerabilities

Filters

Stored XSS in WordPress Ninja Forms plugin

WordPress Ninja Forms plugin <= 3.15.3 - Cross Site Scripting (XSS) vulnerability

WordPress Ninja Forms plugin <= 3.15.3 - Cross Site Scripting (XSS) vulnerability