CVE-2020-8594: Ninjaforms Ninja Forms

Medium severity, CVSS 5.4. EPSS: 1.2% chance of exploitation in the next 30 days.

The Ninja Forms plugin 3.4.22 for WordPress has Multiple Stored XSS vulnerabilities via ninja_forms[recaptcha_site_key], ninja_forms[recaptcha_secret_key], ninja_forms[recaptcha_lang], or ninja_forms[date_format].

Affected products

• Ninjaforms Ninja Forms: version 3.4.22 only

Published 2020-02-14. Last modified 2026-06-17.