CVE-2026-15256 | Ninja Forms Plugin up to 3.14.9 on WordPress shortcode injection

A vulnerability was found in Ninja Forms Plugin up to 3.14.9 on WordPress. It has been classified as critical. This vulnerability affects unknown code of the component shortcode Handler. The manipulation leads to injection.

This vulnerability is documented as CVE-2026-15256. The attack can be initiated remotely. There is not any exploit available.

Upgrading the affected component is recommended.VulDB Recent EntriesRead More