Kstover Ninja Forms – Contact Form Builder With Calculators, Quizzes, Signatures & Ai Form Builder
6 CVEs affecting Kstover Ninja Forms – Contact Form Builder With Calculators, Quizzes, Signatures & Ai Form Builder. Latest disclosed: 2026-10-31. Critical: 0, High: 3.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2026-109997 | High | 7.2 | 2026-10-31 | The Ninja Forms – Contact Form Builder with Calculators, Quizzes, Signatures & AI Form Builder plugin for WordPress is vulnerable to Stored Cross-Site Scriptin… |
CVE-2026-90438 | High | 7.2 | 2026-10-02 | The Ninja Forms – The Contact Form Builder That Grows With You plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Paragraph Text (RTE) Field… |
CVE-2026-94504 | High | 7.2 | 2026-09-22 | Ninja Forms 3.15.3 stores an anonymous non-RTE textarea value and renders it without safe HTML encoding in the legacy submission editor. An attacker can break… |
CVE-2026-100155 | Medium | 6.5 | 2026-10-31 | The The Ninja Forms – Contact Form Builder with Calculators, Quizzes, Signatures & AI Form Builder plugin for WordPress is vulnerable to arbitrary shortcode ex… |
CVE-2026-100151 | Medium | 6.1 | 2026-10-31 | The Ninja Forms – Contact Form Builder with Calculators, Quizzes, Signatures & AI Form Builder plugin for WordPress is vulnerable to Reflected DOM-Based Cross-… |
CVE-2026-101326 | Medium | 5.4 | 2026-10-31 | The The Ninja Forms – Contact Form Builder with Calculators, Quizzes, Signatures & AI Form Builder plugin for WordPress is vulnerable to arbitrary shortcode ex… |