Ninja Forms
Products
| Product | CVEs | Exploited | Latest |
|---|---|---|---|
| Ninja Forms File Uploads Extension | 1 | – | Jul 23, 2026 |
| Ninja Forms Webhooks | 1 | – | May 14, 2025 |
Exploited and recent CVEs
- CVE-2026-57784 WordPress Ninja Forms File Uploads Extension plugin <= 3.3.26 - Cross Site Request Forgery (CSRF) vulnerability 0.2%
- CVE-2024-13940 Ninja Forms Webhooks <= 3.0.7 - Authenticated (Admin+) Server-Side Request Forgery via Form Webhook 0.3%