CVE-2026-90438 | Ninja Forms Plugin up to 3.15.4 on WordPress cross site scripting (EUVD-2026-91177)

October 2, 2026 Yanac

A vulnerability described as problematic has been identified in Ninja Forms Plugin up to 3.15.4 on WordPress. This affects an unknown part. Executing a manipulation can lead to cross site scripting.

This vulnerability is tracked as CVE-2026-90438. The attack can be launched remotely. No exploit exists.VulDB Recent EntriesRead More