CVE-2026-80437 | Ninja Forms Plugin up to 3.15.1 on WordPress Shortcode injection

September 6, 2026 Yanac

A vulnerability marked as critical has been reported in Ninja Forms Plugin up to 3.15.1 on WordPress. This issue affects some unknown processing of the component Shortcode Handler. This manipulation causes injection.

This vulnerability appears as CVE-2026-80437. The attack may be initiated remotely. There is no available exploit.

It is suggested to upgrade the affected component.VulDB Recent EntriesRead More