WordPress security by component
Ninja Forms – The Contact Form Builder That Grows With You
Plugin description
Ninja Forms – The Contact Form Builder That Grows With You provides a drag-and-drop builder for creating and managing WordPress forms.
Ninja Forms – The Contact Form Builder That Grows With You (ninja-forms-the-contact-form-builder-that-grows-with-you) is a WordPress plugin with 2 published CVE records in this archive. The latest tracked vulnerability was published Jul 01, 2026; the highest published CVSS base score is 7.5.
Plugin slug:
ninja-forms-the-contact-form-builder-that-grows-with-youLatest vulnerability
CVE-2026-1239: Ninja Forms – The Contact Form Builder That Grows With You: A security weakness
Ninja Forms – The Contact Form Builder That Grows With You is affected by a security weakness. The vulnerable path is reachable without authentication. The resulting impact depends on how the affected component exposes the vulnerable operation. The published affected range is <= 3.14.1.
| Safe version |
|
||
|---|---|---|---|
| Jul 01, 2026 |
CVE-2026-1239
Ninja Forms – The Contact Form Builder That Grows With You: A security weakness
Ninja Forms – The Contact Form Builder That Grows With You is affected by a security weakness. The vulnerable path is reachable without authentication. The resulting impact depends on how the affected component exposes the vulnerable operation. The published affected range is <= 3.14.1.
|
See mitigation notes |
CVE7.5
|
| Mar 28, 2026 |
CVE-2026-1307
Ninja Forms – The Contact Form Builder That Grows With You: Sensitive information exposure
Ninja Forms – The Contact Form Builder That Grows With You is affected by sensitive information exposure. Exploitation requires an authenticated contributor account. Successful exploitation can disclose data that should not be available to the caller. The published affected range is <= 3.14.1.
|
See mitigation notes |
CVE6.5
|