CVE-2024-25572: Ninjaforms Ninja Forms

High severity, CVSS 8.8. EPSS: 0.3% chance of exploitation in the next 30 days.

Cross-site request forgery (CSRF) vulnerability exists in Ninja Forms prior to 3.4.31. If a website administrator views a malicious page while logging in, unintended operations may be performed.

Affected products

• Ninjaforms Ninja Forms: before 3.4.31 (fixed in 3.4.31)

Published 2024-04-11. Last modified 2026-06-17.