Browse all 2 CVE security advisories affecting Ninja Forms. AI-powered Chinese analysis, POCs, and references for each vulnerability.
| CVE ID | Title | CVSS | Severity | Published |
|---|---|---|---|---|
| CVE-2026-57784 | WordPress Ninja Forms File Uploads Extension plugin <= 3.3.26 - Cross Site Request Forgery (CSRF) vulnerability — Ninja Forms File Uploads ExtensionCWE-352 | 9.6 | Critical | 2026-07-23 |
| CVE-2024-13940 | Ninja Forms Webhooks <= 3.0.7 - Authenticated (Admin+) Server-Side Request Forgery via Form Webhook — Ninja Forms WebhooksCWE-918 | 5.5 | Medium | 2025-05-14 |
This page lists every published CVE security advisory associated with Ninja Forms. Each entry links to a detailed page with CVSS scoring, CWE classification, affected products and references. AI-generated Chinese analysis is provided for fast triage.