Ninja Forms plugin for WordPress before 3.15.4 contains an incomplete server-side validation vulnerability that allows unauthenticated attackers to submit arbitrary values to Checkbox List, Multi-Select List, Image List, Country, and State fields because NF_Abstracts_List falls through to a validate() method that only checks required-field presence. Attackers can submit crafted formula payloads through the unauthenticated nf_ajax_submit endpoint that bypass CSV escaping applied only to Textbox and Textarea fields, resulting in CSV injection when an administrator downloads and opens the exported submissions file.
| CVE | CVE-2026-67187 |
|---|---|
| Severidad | HIGH |
| CVSS | 7.1 / 10 |
| CWE | CWE-1236 |
| Exposición (Shodan) | sin hosts expuestos detectados actualmente |
Producto afectado
Ninja Forms plugin for WordPress 3.15.4
Producto derivado de la descripción (el CPE estructurado de NVD aún no está publicado).