CVE-2023-4109: Ninjaforms Ninja Forms Contact Form

Medium severity, CVSS 4.8. EPSS: 0.4% chance of exploitation in the next 30 days.

The Ninja Forms WordPress Ninja Forms Contact Form WordPress plugin before 3.6.26 was affected by a HTML Injection security vulnerability.

Affected products

• Ninjaforms Ninja Forms Contact Form: before 3.6.26 (fixed in 3.6.26)

Published 2023-08-30. Last modified 2026-06-17.