Skip to content
OpenAdvisories

Product · Saturday Drive

Ninja Forms

16 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

5 results · Clear filters · Feed

  • High 7.1
    CVE-2026-67187

    Ninja Forms WordPress Plugin < 3.15.4 Server-Side Validation Bypass via List Fields

    Ninja Forms plugin for WordPress before 3.15.4 contains an incomplete server-side validation vulnerability that allows unauthenticated attackers to submit arbitrary values to Checkbox List, Multi-Select List, Image List, Country, and State fields because NF_A…

    Saturday Drive Ninja Forms Web / CMS
  • High 7.5
    CVE-2026-65052

    Ninja Forms Calculation and Payment Total Tampering via Fail-Open get_calc_value in ListSelect and ListRadio Fields

    Ninja Forms WordPress plugin version 3.14.8 and prior contains an improper input validation vulnerability that allows unauthenticated attackers to inject arbitrary numeric values into form calculations and payment totals by submitting values that do not match…

    Saturday Drive Ninja Forms Web / CMS
  • High 7.6
    CVE-2023-38393

    WordPress Ninja Forms plugin <= 3.6.25 - Subscriber+ Broken Access Control vulnerability

    Missing Authorization vulnerability in Saturday Drive Ninja Forms.This issue affects Ninja Forms: from n/a through 3.6.25.

    Saturday Drive Ninja Forms
  • High 7.6
    CVE-2023-38386

    WordPress Ninja Forms plugin <= 3.6.25 - Contributor+ Broken Access Control vulnerability

    Missing Authorization vulnerability in Saturday Drive Ninja Forms.This issue affects Ninja Forms: from n/a through 3.6.25.

    Saturday Drive Ninja Forms
  • High 8.8
    CVE-2024-25572

    Cross-site request forgery (CSRF) vulnerability exists in Ninja Forms prior to 3.4.31. If a website administrator views…

    Saturday Drive Ninja Forms