← WordPress Vulnerabilities
WordPress security by component

Ninja Forms – The Contact Form Builder That Grows With You

Ninja Forms – The Contact Form Builder That Grows With You is a WordPress component with 2 published CVE records in this archive. The latest tracked vulnerability was published Jul 01, 2026; the highest CVE/CNA score is 7.5.

Plugin slug: ninja-forms-the-contact-form-builder-that-grows-with-you

CVE-2026-1239: Ninja Forms – The Contact Form Builder That Grows With You: A security weakness

Ninja Forms – The Contact Form Builder That Grows With You is affected by a security weakness. The vulnerable path is reachable without authentication. The resulting impact depends on how the affected component exposes the vulnerable operation. The published affected range is <= 3.14.1.

PublishedJul 01, 2026
Known safe version> 3.14.1
Safe version
Jul 01, 2026 CVE-2026-1239
Ninja Forms – The Contact Form Builder That Grows With You: A security weakness
Ninja Forms – The Contact Form Builder That Grows With You is affected by a security weakness. The vulnerable path is reachable without authentication. The resulting impact depends on how the affected component exposes the vulnerable operation. The published affected range is <= 3.14.1.
> 3.14.1
CVE7.5
NVDPending
Mar 28, 2026 CVE-2026-1307
Ninja Forms – The Contact Form Builder That Grows With You: Sensitive information exposure
Ninja Forms – The Contact Form Builder That Grows With You is affected by sensitive information exposure. Exploitation requires at least contributor-level access. Successful exploitation can disclose data that should not be available to the caller. The published affected range is <= 3.14.1.
> 3.14.1
CVE6.5
NVDPending