CVE-2026-101326 | kstover Ninja Forms Plugin up to 3.15.5 on WordPress Shortcode Execution do_shortcode display_name code injection

October 31, 2026 Yanac

A vulnerability, which was classified as critical, was found in kstover Ninja Forms Plugin up to 3.15.5 on WordPress. This issue affects the function do_shortcode of the component Shortcode Execution. Executing a manipulation of the argument display_name can lead to code injection.

This vulnerability is handled as CVE-2026-101326. The attack can be executed remotely. There is not any exploit available.VulDB Recent EntriesRead More