CVE-2026-67187

The Ninja Forms plugin for WordPress (before version 3.15.4 ) is vulnerable to a server-side validation bypass in various list fields, including Checkbox List, Multi-Select List, Image List, Country, and State. The root cause is that NF_Abstracts_List falls through to a validate() method that fai...

CVE-2026-67187 Ninja Forms WordPress Plugin < 3.15.4 Server-Side Validation Bypass via List Fields

Ninja Forms plugin for WordPress before 3.15.4 contains an incomplete server-side validation vulnerability that allows unauthenticated attackers to submit arbitrary values to Checkbox List, Multi-Select List, Image List, Country, and State fields because NFAbstractsList falls through to a validat...

CVE-2020-10778

A business logic flaw was found in Red Hat CloudForms where the read-only values of the Widgets could be altered. An attacker with low privileges could bypass server-side validation by dropping the disabled attribute from the fields...