Ninja Forms

CrossSite Request Forgery to Limited File Deletion vulnerability <= 3.12.0

4.3

26 September, 2025

CrossSite Request Forgery to Plugin Settings Update vulnerability <= 3.12.0

4.3

26 September, 2025

forms plugin < 3.11.1 Unauthenticated PHP Object Injection vulnerability < 3.11.1

9.8

9 September, 2025

Authenticated (Contributor+) Stored CrossSite Scripting via CSTI vulnerability <= 3.10.2.1

6.5

26 June, 2025

Admin+ Stored XSS vulnerability < 3.10.1

5.9

19 May, 2025