CVE-2026-100155 | kstover Ninja Forms Plugin up to 3.15.5 on WordPress Shortcode do_shortcode code injection

October 31, 2026 Yanac

A vulnerability was found in kstover Ninja Forms Plugin up to 3.15.5 on WordPress. It has been classified as critical. The impacted element is the function do_shortcode of the component Shortcode Handler. This manipulation causes code injection.

The identification of this vulnerability is CVE-2026-100155. It is possible to initiate the attack remotely. There is no exploit available.VulDB Recent EntriesRead More