THREATOPS

THREAT OPS › Threat News › [NVD] CVE-2026-19769 (HIGH 7.2) — The Ninja Forms – The Contact Form Builder That Grows With You plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Repeater Child 'type' Confusion via Unmatched Array Key in all versions up to, and including, 3.15.1 due to insufficient input sanitization and out

[NVD] CVE-2026-19769 (HIGH 7.2) — The Ninja Forms – The Contact Form Builder That Grows With You plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Repeater Child 'type' Confusion via Unmatched Array Key in all versions up to, and including, 3.15.1 due to insufficient input sanitization and out

mednvdPublished 2026-09-05

CVE-2026-19769 CVSS: 7.2 HIGH Published: 2026-09-05T07:17:11.333

The Ninja Forms – The Contact Form Builder That Grows With You plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Repeater Child 'type' Confusion via Unmatched Array Key in all versions up to, and including, 3.15.1 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticat

MITRE ATT&CK techniques

JavaScriptT1059.007

Indicators of compromise

CVE-2026-19769cve

Original source: https://nvd.nist.gov/vuln/detail/CVE-2026-19769