<?xml version="1.0" encoding="UTF-8"?><rss version="2.0"><channel><title>agentprime: saturday-drive-ninja-forms</title><description>Every new CVE for saturday-drive-ninja-forms.</description><link>https://agentprime.io/</link><item><title>CVE-2026-67187: Ninja Forms WordPress Plugin &lt; 3.15.4 Server-Side Validation Bypass via List Fields</title><link>https://agentprime.io/advisories/CVE-2026-67187/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-67187/</guid><description>CVSS 5.1 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Wed, 28 Oct 2026 15:19:16 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-65052: Ninja Forms Calculation and Payment Total Tampering via Fail-Open get_calc_value in ListSelect and ListRadio Fields</title><link>https://agentprime.io/advisories/CVE-2026-65052/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-65052/</guid><description>CVSS 8.7 (High). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Tue, 21 Jul 2026 14:36:07 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-65051: Ninja Forms Server-Side Validation Bypass via Client-Controlled Field Metadata Merge in AJAX Submission Handler</title><link>https://agentprime.io/advisories/CVE-2026-65051/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-65051/</guid><description>CVSS 6.9 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Tue, 21 Jul 2026 14:31:55 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-65050: Ninja Forms Missing Authorization in submissions-table Gutenberg Block Discloses Form Submissions to Unauthenticated Visitors</title><link>https://agentprime.io/advisories/CVE-2026-65050/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-65050/</guid><description>CVSS 7.1 (High). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Tue, 21 Jul 2026 14:26:53 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-65049: Ninja Forms Cross-Site Network-Wide Data Deletion on WordPress Multisite via nf_delete_all_data AJAX Action</title><link>https://agentprime.io/advisories/CVE-2026-65049/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-65049/</guid><description>CVSS 8.4 (High). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Tue, 21 Jul 2026 14:22:08 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-65048: Ninja Forms Unauthenticated Stored Cross-Site Scripting via Repeatable Fieldset Submission Index</title><link>https://agentprime.io/advisories/CVE-2026-65048/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-65048/</guid><description>CVSS 9.3 (Critical). Critical: CVSS score 9.3: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Tue, 21 Jul 2026 14:16:08 GMT</pubDate><category>CVE</category><category>critical</category></item><item><title>CVE-2024-43999: WordPress Ninja Forms plugin &lt;= 3.8.11 - Cross Site Scripting (XSS) vulnerability</title><link>https://agentprime.io/advisories/CVE-2024-43999/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2024-43999/</guid><description>CVSS 5.9 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Tue, 17 Sep 2024 23:14:18 GMT</pubDate><category>CVE</category></item><item><title>CVE-2024-39628: WordPress Ninja Forms plugin &lt;= 3.8.6 - Cross Site Request Forgery (CSRF) vulnerability</title><link>https://agentprime.io/advisories/CVE-2024-39628/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2024-39628/</guid><description>CVSS 5.4 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Mon, 26 Aug 2024 20:58:09 GMT</pubDate><category>CVE</category></item><item><title>CVE-2024-37934: WordPress Ninja Forms plugin &lt;= 3.8.4 - Subscriber+ Arbitrary Shortcode Execution vulnerability</title><link>https://agentprime.io/advisories/CVE-2024-37934/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2024-37934/</guid><description>CVSS 5.4 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Tue, 09 Jul 2024 12:22:20 GMT</pubDate><category>CVE</category></item><item><title>CVE-2023-38393: WordPress Ninja Forms plugin &lt;= 3.6.25 - Subscriber+ Broken Access Control vulnerability</title><link>https://agentprime.io/advisories/CVE-2023-38393/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2023-38393/</guid><description>CVSS 7.6 (High). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Wed, 19 Jun 2024 14:15:38 GMT</pubDate><category>CVE</category></item><item><title>CVE-2023-38386: WordPress Ninja Forms plugin &lt;= 3.6.25 - Contributor+ Broken Access Control vulnerability</title><link>https://agentprime.io/advisories/CVE-2023-38386/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2023-38386/</guid><description>CVSS 7.6 (High). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Wed, 19 Jun 2024 13:06:42 GMT</pubDate><category>CVE</category></item><item><title>CVE-2024-25572: Cross-site request forgery in Saturday Drive Ninja Forms</title><link>https://agentprime.io/advisories/CVE-2024-25572/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2024-25572/</guid><description>CVSS 8.8 (High). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Thu, 11 Apr 2024 02:29:38 GMT</pubDate><category>CVE</category></item><item><title>CVE-2024-26019: Cross-site scripting in Saturday Drive Ninja Forms</title><link>https://agentprime.io/advisories/CVE-2024-26019/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2024-26019/</guid><description>CVSS 5.4 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Thu, 11 Apr 2024 02:29:26 GMT</pubDate><category>CVE</category></item><item><title>CVE-2024-29220: Cross-site scripting in Saturday Drive Ninja Forms</title><link>https://agentprime.io/advisories/CVE-2024-29220/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2024-29220/</guid><description>CVSS 6.1 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Thu, 11 Apr 2024 02:29:10 GMT</pubDate><category>CVE</category></item><item><title>CVE-2021-34647: Ninja Forms &lt;= 3.5.7 Sensitive Information Disclosure</title><link>https://agentprime.io/advisories/CVE-2021-34647/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2021-34647/</guid><description>CVSS 6.5 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Wed, 22 Sep 2021 17:53:18 GMT</pubDate><category>CVE</category></item><item><title>CVE-2021-34648: Ninja Forms &lt;= 3.5.7 Unprotected REST-API to Email Injection</title><link>https://agentprime.io/advisories/CVE-2021-34648/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2021-34648/</guid><description>CVSS 6.4 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Wed, 22 Sep 2021 17:53:11 GMT</pubDate><category>CVE</category></item></channel></rss>