Name: Vietnam CyStack Joint Stock Company
Address: Tan Hong Ha Complex, 317 Truong Chinh Street, Hanoi, Vietnam, 100000, VN
Telephone: (+84) 247 109 9656
Price range: Negotiable

Products & ServicesProducts & Services
SolutionsSolutions
PricingPricing
CompanyCompany
ResourcesResources

VulnScan

kstover Security Vulnerabilities | CyStack CVE Database

Vulnerability	Exploitation status	Fix	Affected product	Published	Severity

`CVE-2026-11363`Ninja Forms <= 3.14.6 - Authenticated (Administrator+) PHP Object Injection via Form Import	Exploitation statusNot known exploited	FixYes	Affected productNinja Forms – The Contact Form Builder That Grows With You	Published09/09/2026	SeverityMedium
`CVE-2026-19769`Ninja Forms <= 3.15.1 - Unauthenticated Stored Cross-Site Scripting via Repeater Child 'type' Confusion via Unmatched Array Key	Exploitation statusNot known exploited	FixYes	Affected productNinja Forms – The Contact Form Builder That Grows With You	Published09/05/2026	SeverityHigh
`CVE-2026-15663`Ninja Forms <= 3.14.9 - Authenticated (Administrator+) SQL Injection via Import File 'settings' Key	Exploitation statusNot known exploited	FixYes	Affected productNinja Forms – The Contact Form Builder That Grows With You	Published07/24/2026	SeverityMedium
`CVE-2026-1239`Ninja Forms <= 3.14.1 - Missing Authorization to Unauthenticated Sensitive Information Disclosure via token/refresh REST Endpoint	Exploitation statusNot known exploited	FixYes	Affected productNinja Forms – The Contact Form Builder That Grows With You	Published07/01/2026	SeverityHigh
`CVE-2026-1307`Ninja Forms <= 3.14.1 - Authenticated (Contributor+) Sensitive Information Disclosure via Block Editor Token	Exploitation statusNot known exploited	FixYes	Affected productNinja Forms – The Contact Form Builder That Grows With You	Published03/28/2026	SeverityMedium
`CVE-2026-2268`Ninja Forms <= 3.14.0 - Unauthenticated Information Disclosure in nf_ajax_submit AJAX Action	Exploitation statusNot known exploited	FixYes	Affected productNinja Forms – The Contact Form Builder That Grows With You	Published02/10/2026	SeverityHigh
`CVE-2025-11924`Ninja Forms – The Contact Form Builder That Grows With You <= 3.13.2 - Insecure Direct Object Reference to Unauthenticated Sensitive Information Exposure via Unscoped Bearer Token	Exploitation statusNot known exploited	FixYes	Affected productNinja Forms – The Contact Form Builder That Grows With You	Published12/17/2025	SeverityHigh
`CVE-2025-10498`Ninja Forms – The Contact Form Builder That Grows With You <= 3.12.0 - Cross-Site Request Forgery to Limited File Deletion	Exploitation statusNot known exploited	FixYes	Affected productNinja Forms – The Contact Form Builder That Grows With You	Published09/27/2025	SeverityMedium
`CVE-2025-10499`Ninja Forms – The Contact Form Builder That Grows With You <= 3.12.0 - Cross-Site Request Forgery to Plugin Settings Update	Exploitation statusNot known exploited	FixYes	Affected productNinja Forms – The Contact Form Builder That Grows With You	Published09/27/2025	SeverityMedium
`CVE-2025-5398`Ninja Forms <= 3.10.2.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via CSTI	Exploitation statusNot known exploited	FixYes	Affected productNinja Forms – The Contact Form Builder That Grows With You	Published06/27/2025	SeverityMedium
`CVE-2024-13470`Ninja Forms – The Contact Form Builder That Grows With You <= 3.8.24 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode	Exploitation statusNot known exploited	FixYes	Affected productNinja Forms – The Contact Form Builder That Grows With You	Published01/30/2025	SeverityMedium
`CVE-2024-12238`Ninja Forms – The Contact Form Builder That Grows With You <= 3.8.22 - Authenticated (Subscriber+) Arbitrary Shortcode Execution	Exploitation statusNot known exploited	FixYes	Affected productNinja Forms – The Contact Form Builder That Grows With You	Published12/29/2024	SeverityMedium
`CVE-2024-11052`Ninja Forms – The Contact Form Builder That Grows With You <= 3.8.19 - Unauthenticated Stored Cross-Site Scripting via Form Calculations	Exploitation statusNot known exploited	FixYes	Affected productNinja Forms – The Contact Form Builder That Grows With You	Published12/12/2024	SeverityHigh
`CVE-2024-3866`Ninja Forms Contact Form <= 3.8.15 - Reflected Self-Based Cross-Site Scripting via Referer	Exploitation statusNot known exploited	FixYes	Affected productNinja Forms – The Contact Form Builder That Grows With You	Published09/25/2024	SeverityMedium
`CVE-2024-2108`Ninja Forms Contact Form – The Drag and Drop Form Builder for WordPress <= 3.8.0 - Authenticated (Author+) Stored Cross-Site Scripting	Exploitation statusNot known exploited	FixYes	Affected productNinja Forms – The Contact Form Builder That Grows With You	Published03/29/2024	SeverityMedium
`CVE-2024-2113`Ninja Forms Contact Form – The Drag and Drop Form Builder for WordPress <= 3.8.0 - Cross-Site Request Forgery to Publicly Accessible Form Submission Export	Exploitation statusNot known exploited	FixYes	Affected productNinja Forms – The Contact Form Builder That Grows With You	Published03/29/2024	SeverityMedium
`CVE-2024-0685`Ninja Forms Contact Form <= 3.7.1 - Unauthenticated Second Order SQL Injection	Exploitation statusNot known exploited	FixYes	Affected productNinja Forms – The Contact Form Builder That Grows With You	Published02/02/2024	SeverityMedium

17 / 17 Results

All vulnerabilities loaded

Security vulnerabilities from kstover

kstover

How many security vulnerabilities does kstover have?

Which kstover product has the most security vulnerabilities?

Filters

Run an in-depth assessment with complete web risk management

Popular kstover products

Ninja Forms – The Contact Form Builder That Grows With You