CVE Vulnerability Advisory Database
Filter vulnerabilities by CVSS severity, active CISA KEV exploitation, and technology stack.
WordPress Ninja Forms Plugin Arbitrary Shortcode Execution Vulnerability (CVE-2026-101326)
[Affected Scope] Ninja Forms WordPress plugin versions up to, and including, 3.15.5
[Impact] Authenticated attackers with subscriber-level access can execute arbitrary shortcodes and potentially access sensitive data by manipulating their profile display name
[Mitigation] Immediately update the Ninja Forms plugin to the latest version (3.15.6 or higher) and review default field configurations
WordPress Ninja Forms Plugin Arbitrary Shortcode Execution Vulnerability (CVE-2026-100155)
[Affected Scope] Ninja Forms WordPress plugin versions up to, and including, 3.15.5
[Impact] Unauthenticated attackers can execute arbitrary WordPress shortcodes, potentially leading to sensitive information disclosure or further exploitation
[Mitigation] Immediately update the Ninja Forms plugin to the latest secure version (3.15.6 or higher)