CVE-2026-80437

Ninja Forms WordPress plugin versions 3.14.10 through before 3.15.2 are affected by an unauthenticated arbitrary shortcode execution vulnerability. The plugin fails to sanitize shortcodes in request-derived values (IP and Referer merge tags) before substituting them into content that is later pro...