agentprime: kstover-ninja-forms-contact-form-builder-with-calculators-quizzes-signatures-aiEvery new CVE for kstover-ninja-forms-contact-form-builder-with-calculators-quizzes-signatures-ai.https://agentprime.io/CVE-2026-100151: Ninja Forms <= 3.15.5 - Reflected DOM-Based Cross-Site Scripting via 'querystring:<key>' URL Parameterhttps://agentprime.io/advisories/CVE-2026-100151/https://agentprime.io/advisories/CVE-2026-100151/CVSS 6.1 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Sat, 31 Oct 2026 09:29:26 GMTCVECVE-2026-100155: Ninja Forms <= 3.15.5 - Unauthenticated Arbitrary Shortcode Execution via 'formData' Field Value via Success Message Merge Taghttps://agentprime.io/advisories/CVE-2026-100155/https://agentprime.io/advisories/CVE-2026-100155/CVSS 6.5 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Sat, 31 Oct 2026 05:33:08 GMTCVECVE-2026-109997: Ninja Forms <= 3.15.5 - Unauthenticated Stored Cross-Site Scripting via 'extra' Parameter via Metadata Key Normalizationhttps://agentprime.io/advisories/CVE-2026-109997/https://agentprime.io/advisories/CVE-2026-109997/CVSS 7.2 (High). Published by the CVE Program. Not analysed by agentprime yet.Sat, 31 Oct 2026 05:33:07 GMTCVECVE-2026-101326: Ninja Forms <= 3.15.5 - Authenticated (Subscriber+) Arbitrary Shortcode Execution via '{wp:user_display_name}' Merge Tag via display_namehttps://agentprime.io/advisories/CVE-2026-101326/https://agentprime.io/advisories/CVE-2026-101326/CVSS 5.4 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Sat, 31 Oct 2026 05:33:05 GMTCVECVE-2026-90438: Ninja Forms <= 3.15.4 - Unauthenticated Stored Cross-Site Scripting via Paragraph Text (RTE) Field Submissionhttps://agentprime.io/advisories/CVE-2026-90438/https://agentprime.io/advisories/CVE-2026-90438/CVSS 7.2 (High). Published by the CVE Program. Not analysed by agentprime yet.Fri, 02 Oct 2026 05:30:17 GMTCVECVE-2026-94504: Ninja Forms – The Contact Form Builder That Grows With You <= 3.15.3 - Stored Cross-Site Scriptinghttps://agentprime.io/advisories/CVE-2026-94504/https://agentprime.io/advisories/CVE-2026-94504/CVSS 7.2 (High). Published by the CVE Program. Not analysed by agentprime yet.Tue, 22 Sep 2026 06:39:41 GMTCVE