Ninja Forms

2 CVEs across 2 Ninja Forms products. Browse Ninja Forms vulnerabilities, severities, and proof-of-concept exploits.

Ninja Forms products with known CVEs

ProductCVEs
Ninja Forms File Uploads Extension1
Ninja Forms Webhooks1
Ninja Forms CVEs — newest first
CVESeverityScorePublishedSummary
CVE-2026-57784Critical9.62026-07-23Unauthenticated Cross Site Request Forgery (CSRF) in Ninja Forms File Uploads Extension <= 3.3.26 versions.
CVE-2024-13940Medium5.52025-05-14The Ninja Forms Webhooks plugin for WordPress is vulnerable to Server-Side Request Forgery in all versions up to, and including, 3.0.7 via the form webhook fun…