<?xml version="1.0" encoding="UTF-8"?><rss version="2.0"><channel><title>agentprime: ninja-forms</title><description>Every new CVE for ninja-forms.</description><link>https://agentprime.io/</link><item><title>CVE-2026-91827: Ninja Forms 3.15.3 - Unauthenticated PHP Object Injection via CSV Export</title><link>https://agentprime.io/advisories/CVE-2026-91827/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-91827/</guid><description>CVSS 7.5 (High). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Tue, 22 Sep 2026 06:58:01 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-92438: Ninja Forms 3.15.3 - Unauthenticated Stored XSS via Paragraph Text Field in Submissions Admin</title><link>https://agentprime.io/advisories/CVE-2026-92438/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-92438/</guid><description>CVSS 8.8 (High). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Tue, 22 Sep 2026 06:58:00 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-80437: Ninja Forms 3.14.10 - 3.15.1 - Unauthenticated Arbitrary Shortcode Execution via IP and Referer Merge Tags</title><link>https://agentprime.io/advisories/CVE-2026-80437/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-80437/</guid><description>CVSS 4.8 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Sun, 06 Sep 2026 09:36:35 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-80438: Ninja Forms 3.14.0 - 3.15.1 - Authenticated Arbitrary Post Modification and Sensitive Information Disclosure via Abilities REST API</title><link>https://agentprime.io/advisories/CVE-2026-80438/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-80438/</guid><description>CVSS 5.9 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Fri, 04 Sep 2026 06:00:04 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-15256: Ninja Forms &lt; 3.14.10 - Unauthenticated Arbitrary Shortcode Execution via Query-String Populated Field Default</title><link>https://agentprime.io/advisories/CVE-2026-15256/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-15256/</guid><description>CVSS 4.8 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Thu, 06 Aug 2026 17:14:40 GMT</pubDate><category>CVE</category></item><item><title>CVE-2025-14072: Ninja Forms &lt; 3.13.3 - Unauthenticated Token Generation and Submission Disclosure</title><link>https://agentprime.io/advisories/CVE-2025-14072/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2025-14072/</guid><description>CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Fri, 02 Jan 2026 06:00:12 GMT</pubDate><category>CVE</category></item><item><title>CVE-2025-9083: Ninja-forms &lt; 3.11.1 - Unauthenticated PHP Objection</title><link>https://agentprime.io/advisories/CVE-2025-9083/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2025-9083/</guid><description>CVSS 9.8 (Critical). Critical: CVSS score 9.8: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Thu, 18 Sep 2025 06:00:06 GMT</pubDate><category>CVE</category><category>critical</category></item><item><title>CVE-2025-2561: Ninja Forms &lt; 3.10.1 - Admin+ Stored XSS</title><link>https://agentprime.io/advisories/CVE-2025-2561/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2025-2561/</guid><description>CVSS 4.8 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Mon, 19 May 2025 06:00:05 GMT</pubDate><category>CVE</category></item><item><title>CVE-2025-2560: Ninja Forms &lt; 3.10.1 - Admin+ Stored XSS</title><link>https://agentprime.io/advisories/CVE-2025-2560/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2025-2560/</guid><description>CVSS 4.8 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Mon, 19 May 2025 06:00:05 GMT</pubDate><category>CVE</category></item><item><title>CVE-2025-2524: Ninja Forms &lt; 3.10.1 - Admin+ Stored XSS</title><link>https://agentprime.io/advisories/CVE-2025-2524/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2025-2524/</guid><description>CVSS 4.8 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Mon, 19 May 2025 06:00:05 GMT</pubDate><category>CVE</category></item><item><title>CVE-2024-7354: Ninja Forms 3.8.6-3.8.10 - Reflected XSS</title><link>https://agentprime.io/advisories/CVE-2024-7354/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2024-7354/</guid><description>CVSS 6.1 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Mon, 02 Sep 2024 06:00:01 GMT</pubDate><category>CVE</category></item></channel></rss>