agentprime: kstover-ninja-forms-the-contact-form-builder-that-grows-with-you

agentprime: kstover-ninja-forms-the-contact-form-builder-that-grows-with-youEvery new CVE for kstover-ninja-forms-the-contact-form-builder-that-grows-with-you.https://agentprime.io/CVE-2026-11363: Ninja Forms <= 3.14.6 - Authenticated (Administrator+) PHP Object Injection via Form Importhttps://agentprime.io/advisories/CVE-2026-11363/https://agentprime.io/advisories/CVE-2026-11363/CVSS 6.6 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Wed, 09 Sep 2026 03:28:48 GMTCVECVE-2026-19769: Ninja Forms <= 3.15.1 - Unauthenticated Stored Cross-Site Scripting via Repeater Child 'type' Confusion via Unmatched Array Keyhttps://agentprime.io/advisories/CVE-2026-19769/https://agentprime.io/advisories/CVE-2026-19769/CVSS 7.2 (High). Published by the CVE Program. Not analysed by agentprime yet.Sat, 05 Sep 2026 06:37:56 GMTCVECVE-2026-15663: Ninja Forms <= 3.14.9 - Authenticated (Administrator+) SQL Injection via Import File 'settings' Keyhttps://agentprime.io/advisories/CVE-2026-15663/https://agentprime.io/advisories/CVE-2026-15663/CVSS 4.9 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Fri, 24 Jul 2026 09:31:46 GMTCVECVE-2026-1239: Ninja Forms <= 3.14.1 - Missing Authorization to Unauthenticated Sensitive Information Disclosure via token/refresh REST Endpointhttps://agentprime.io/advisories/CVE-2026-1239/https://agentprime.io/advisories/CVE-2026-1239/CVSS 7.5 (High). Published by the CVE Program. Not analysed by agentprime yet.Wed, 01 Jul 2026 05:35:30 GMTCVECVE-2026-1307: Ninja Forms <= 3.14.1 - Authenticated (Contributor+) Sensitive Information Disclosure via Block Editor Tokenhttps://agentprime.io/advisories/CVE-2026-1307/https://agentprime.io/advisories/CVE-2026-1307/CVSS 6.5 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Sat, 28 Mar 2026 06:46:08 GMTCVECVE-2026-2268: Ninja Forms <= 3.14.0 - Unauthenticated Information Disclosure in nf_ajax_submit AJAX Actionhttps://agentprime.io/advisories/CVE-2026-2268/https://agentprime.io/advisories/CVE-2026-2268/CVSS 7.5 (High). Published by the CVE Program. Not analysed by agentprime yet.Tue, 10 Feb 2026 09:26:04 GMTCVECVE-2025-11924: Ninja Forms – The Contact Form Builder That Grows With You <= 3.13.2 - Insecure Direct Object Reference to Unauthenticated Sensitive Information Exposure via Unscoped Bearer Tokenhttps://agentprime.io/advisories/CVE-2025-11924/https://agentprime.io/advisories/CVE-2025-11924/CVSS 7.5 (High). Published by the CVE Program. Not analysed by agentprime yet.Wed, 17 Dec 2025 06:42:30 GMTCVECVE-2025-10498: Ninja Forms – The Contact Form Builder That Grows With You <= 3.12.0 - Cross-Site Request Forgery to Limited File Deletionhttps://agentprime.io/advisories/CVE-2025-10498/https://agentprime.io/advisories/CVE-2025-10498/CVSS 4.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Sat, 27 Sep 2025 02:25:14 GMTCVECVE-2025-10499: Ninja Forms – The Contact Form Builder That Grows With You <= 3.12.0 - Cross-Site Request Forgery to Plugin Settings Updatehttps://agentprime.io/advisories/CVE-2025-10499/https://agentprime.io/advisories/CVE-2025-10499/CVSS 4.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Sat, 27 Sep 2025 02:25:13 GMTCVECVE-2025-5398: Ninja Forms <= 3.10.2.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via CSTIhttps://agentprime.io/advisories/CVE-2025-5398/https://agentprime.io/advisories/CVE-2025-5398/CVSS 6.4 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Fri, 27 Jun 2025 09:23:19 GMTCVECVE-2024-13470: Ninja Forms – The Contact Form Builder That Grows With You <= 3.8.24 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcodehttps://agentprime.io/advisories/CVE-2024-13470/https://agentprime.io/advisories/CVE-2024-13470/CVSS 6.4 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Thu, 30 Jan 2025 07:23:05 GMTCVECVE-2024-12238: Ninja Forms – The Contact Form Builder That Grows With You <= 3.8.22 - Authenticated (Subscriber+) Arbitrary Shortcode Executionhttps://agentprime.io/advisories/CVE-2024-12238/https://agentprime.io/advisories/CVE-2024-12238/CVSS 6.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Sun, 29 Dec 2024 05:22:53 GMTCVECVE-2024-11052: Ninja Forms – The Contact Form Builder That Grows With You <= 3.8.19 - Unauthenticated Stored Cross-Site Scripting via Form Calculationshttps://agentprime.io/advisories/CVE-2024-11052/https://agentprime.io/advisories/CVE-2024-11052/CVSS 7.2 (High). Published by the CVE Program. Not analysed by agentprime yet.Thu, 12 Dec 2024 05:24:24 GMTCVECVE-2024-3866: Ninja Forms Contact Form <= 3.8.15 - Reflected Self-Based Cross-Site Scripting via Refererhttps://agentprime.io/advisories/CVE-2024-3866/https://agentprime.io/advisories/CVE-2024-3866/CVSS 4.7 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Wed, 25 Sep 2024 06:49:02 GMTCVECVE-2024-2108: Ninja Forms Contact Form – The Drag and Drop Form Builder for WordPress <= 3.8.0 - Authenticated (Author+) Stored Cross-Site Scriptinghttps://agentprime.io/advisories/CVE-2024-2108/https://agentprime.io/advisories/CVE-2024-2108/CVSS 4.6 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Fri, 29 Mar 2024 06:44:00 GMTCVECVE-2024-2113: Ninja Forms Contact Form – The Drag and Drop Form Builder for WordPress <= 3.8.0 - Cross-Site Request Forgery to Publicly Accessible Form Submission Exporthttps://agentprime.io/advisories/CVE-2024-2113/https://agentprime.io/advisories/CVE-2024-2113/CVSS 4.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Fri, 29 Mar 2024 06:43:58 GMTCVECVE-2024-0685: Ninja Forms Contact Form <= 3.7.1 - Unauthenticated Second Order SQL Injectionhttps://agentprime.io/advisories/CVE-2024-0685/https://agentprime.io/advisories/CVE-2024-0685/CVSS 5.9 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Fri, 02 Feb 2024 04:32:34 GMTCVE