Most recent entries from all https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Fri, 09 Oct 2026 02:03:13 +0000 CVE-2026-15256 — Ninja Forms < 3.14.10 - Unauthenticated Arbitrary Shortcode Execution via Query-String Populated Field Default https://cve.radiocsirt.org/vuln/cve-2026-15256 <p><strong>Affected:</strong> Unknown Ninja Forms</p> <p>The Ninja Forms WordPress plugin before 3.14.10 does not prevent user-supplied query-string input, used to pre-populate a form field&#39;s default value, from being processed as a shortcode, allowing unauthenticated attackers to execute arbitrary shortcodes registered on the site when a form so configured is embedded on a public page.</p> <p><strong>Affected:</strong> Unknown Ninja Forms</p> <p>The Ninja Forms WordPress plugin before 3.14.10 does not prevent user-supplied query-string input, used to pre-populate a form field&#39;s default value, from being processed as a shortcode, allowing unauthenticated attackers to execute arbitrary shortcodes registered on the site when a form so configured is embedded on a public page.</p> https://cve.radiocsirt.org/vuln/cve-2026-15256