Now officially on WordPress.org

CVE Database / CVE-2025-14072

CVE · Medium

CVE-2025-14072 — Ninja Forms – The Contact Form Builder That Grows With You [ninja-forms] < 3.13.3

CVE Vulnerability Type Severity Affected Fixed in Published Status
CVE-2025-14072 Ninja Forms – The Contact Form Builder That Grows With You [ninja-forms] < 3.13.3 Improper Authentication Medium 5.3 < 3.13.3 3.13.3 2025-12-12 —

CVE-2025-14072

The Ninja Forms plugin for WordPress is vulnerable to unauthorized access due to a missing security check on a specific function. As a result, attackers can obtain a token without proper authentication, allowing them to view any form submissions, including potentially sensitive information. This issue affects all versions of the plugin up to and including 3.13.2.

Based on public CVE data (MITRE/NVD).

Scan your WordPress site free

No signup, no credit card — enter your URL and get a security report in seconds.

Run a free scan Get the plugin (free)

See the full security page for this plugin Browse the CVE database Browse all security findings