CVE-2026-15161 | SaturdayDrive Ninja Forms Plugin up to 3.3.6 on WordPress AJAX handler save_filter cross site scripting

July 17, 2026 Yanac

A vulnerability described as problematic has been identified in SaturdayDrive Ninja Forms Plugin up to 3.3.6 on WordPress. The affected element is the function save_filter of the component AJAX handler. Such manipulation of the argument filter leads to cross site scripting.

This vulnerability is listed as CVE-2026-15161. The attack may be performed from remote. There is no available exploit.VulDB Recent EntriesRead More