WordPress Ninja Forms plugin <= 3.15.4 - Unauthenticated Stored Cross-Site Scripting via Paragraph Text (RTE) Field Submission vulnerability

Unauthenticated Stored Cross-Site Scripting via Paragraph Text RTE Field Submission vulnerability discovered by UKO - Korea univ. in WordPress Plugin Ninja Forms versions = 3.15.4...

WordPress Ninja Forms - File Uploads plugin <= 3.3.34 - Unauthenticated Arbitrary File Upload vulnerability

WordPress Ninja Forms - File Uploads plugin = 3.3.34 - Unauthenticated Arbitrary File Upload vulnerability discovered by daroo in WordPress Plugin Ninja Forms File Uploads Extension versions = 3.3.34...

CVE-2026-102385

Unauthenticated Cross Site Scripting XSS in Ninja Forms = 3.15.3 versions...

CVE-2026-102385 WordPress Ninja Forms plugin <= 3.15.3 - Cross Site Scripting (XSS) vulnerability

Unauthenticated Cross Site Scripting XSS in Ninja Forms = 3.15.3 versions...

EUVD-2026-89941

Unauthenticated Cross Site Scripting XSS in Ninja Forms = 3.15.3 versions...

CVE-2026-102385

The Ninja Forms WordPress plugin versions

CVE-2026-0740

CVE-2026-0740 Ninja Forms File Uploads = 3.3.26 - Subida de archivos arbitraria no autenticada a RCE Exploit para CVE-2026-0740 descubierta por Selim Lanouar whattheslime. Para una inmersión técnica completa, lea el artículo completo en el blog de Lexfo. Descargo de responsabilidad Este repositor...

CVE-2026-0740-mass

CVE-2026-0740 — Motor de Explotación Masiva Autor: 0xNuts Colaborador: Cursor Repositorio: https://github.com/ExDev994/CVE-2026-0740-mass PoC para CVE-2026-0740: Ninja Forms File Uploads = 3.3.26 — Subida Arbitraria de Archivos sin Autenticación que puede llevar a RCE. La vulnerabilidad inicial f...

ninja-form-exploit

ninja-form-exploit CVE-2026-0740 — Escáner de vulnerabilidades multihilo para el problema de path traversal en la carga de archivos de Ninja Forms en WordPress. Descripción main.py escanea una lista de objetivos WordPress para determinar si el plugin Ninja Forms File Uploads es vulnerable a...

CVE-2026-0740

CVE-2026-0740 🧩 Descripción general CVE-2026-0740 es una vulnerabilidad de subida arbitraria de archivos sin autenticación que afecta a: Ninja Forms File Uploads ≤ 3.3.26 plugin de WordPress Esta falla permite a los atacantes subir archivos arbitrarios al servidor sin autenticación, lo que...

cve-2026-94504

cve-2026-94504 Ninja Forms unauth stored XSS POC Ninja Forms ≤ 3.15.3 — unauthenticated stored XSS. A public non-RTE textarea is saved, then htmlentitydecode'd and written into the legacy submission editor with no esctextarea. 3.15.4 escapes it. No login is required to plant the payload. It runs...

Exploit for CVE-2026-94504

cve-2026-94504 Ninja Forms unauth stored XSS POC Ninja Forms...

CVE-2026-95515

Unauthenticated Cross Site Scripting XSS in Ninja Forms = 3.15.3 versions...

EUVD-2026-85490

Unauthenticated Cross Site Scripting XSS in Ninja Forms = 3.15.3 versions...

CVE-2026-95515 WordPress Ninja Forms plugin <= 3.15.3 - Cross Site Scripting (XSS) vulnerability

Unauthenticated Cross Site Scripting XSS in Ninja Forms = 3.15.3 versions...

CVE-2026-95515

The Ninja Forms WordPress plugin, version 3.15.3 and below , is vulnerable to an unauthenticated Cross Site Scripting (XSS) . This vulnerability allows an attacker to execute malicious scripts in the context of the user's browser. No specific root cause, exploit links, or remediation steps are pr...

WordPress Ninja Forms plugin <= 3.15.3 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by Dthangws in WordPress Plugin Ninja Forms versions = 3.15.3...

PT-2026-97475

Unauthenticated Cross Site Scripting XSS in Ninja Forms = 3.15.3 versions...

CVE-2026-95515: Improper Neutralization of Input During Web Page Generation

Unauthenticated Cross Site Scripting XSS in Ninja Forms = 3.15.3 versions...

WordPress Ninja Forms – Contact Form Builder with Calculators, Quizzes, Signatures & AI Form Builder plugin <= 3.15.3 - Stored Cross-Site Scripting vulnerability

Stored Cross-Site Scripting vulnerability discovered by Hippolyte Quéré Hippie Hippie in WordPress Plugin Ninja Forms versions = 3.15.3...