Skip to content
Threat Feed
Subscribe

Product

Ninja Forms (<= 3.15.1)

1 brief RSS
high advisory

Stored XSS and Arbitrary File Write in Ninja Forms WordPress Plugin

An unauthenticated stored XSS and arbitrary file write vulnerability in Ninja Forms versions 3.15.1 and earlier allows attackers to inject malicious scripts by exploiting input validation flaws in the File Uploads add-on.

Ninja Forms web-application wordpress xss cve-2026-19769
2t 1c