What is CVE-2026-65052?

CVE-2026-65052 is a high-severity vulnerability in Saturday Drive Ninja Forms, classified under CWE-472. CVSS score: 7.5/10. Published 2026-07-21.

How severe is CVE-2026-65052?

High severity. CVSS v3 base score is 7.5 out of 10.

Vulnerability in Saturday Drive Ninja Forms

CVE-2026-65052

Ninja Forms WordPress plugin version 3.14.8 and prior contains an improper input validation vulnerability that allows unauthenticated attackers to inject arbitrary numeric values into form calculations and payment totals by submitting valu…

CVSS v3 metric

CVSS v3 base score 7.5 (High). Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N.

Affected products

Saturday Drive Ninja Forms — versions 0, 3.14.9

Weakness classification (CWE)

CWE-472

References

disclosure@vulncheck.com (product)
disclosure@vulncheck.com (patch)
disclosure@vulncheck.com (third-party-advisory)

Frequently asked questions

What is CVE-2026-65052?: CVE-2026-65052 is a high-severity vulnerability in Saturday Drive Ninja Forms, classified under CWE-472. CVSS score: 7.5/10. Published 2026-07-21.
How severe is CVE-2026-65052?: High severity. CVSS v3 base score is 7.5 out of 10.