Ninja Forms - Geek Feed

Ninja Forms plugin flaw exploited to hack WordPress sites

October 10, 2026October 10, 2026 geekfeed0Tagged Actively Exploited, Cross-site scripting, CVE-2026-93836, CVE-2026-94504, Exploitation, Ninja Forms, Plugin, vulnerability, WooCommerce, xss

Hackers are exploiting stored cross-site scripting (XSS) vulnerabilities in two unrelated WordPress plugins, Ninja Forms and WPC Product Bundles for WooCommerce, to install backdoors and create rogue admin accounts. Both vulnerabilities received a high severity score and require an authenticated session to exploit. They are tracked as CVE-2026-93836, affecting WPC Product Bundles for WooCommerce versions 8.6.6 […]

3 mins read

Hackers exploit critical flaw in Ninja Forms WordPress plugin

April 10, 2026April 10, 2026 geekfeed0Tagged Actively Exploited, CVE-2026-0740, File Upload, Ninja Forms, Plugin, vulnerability, Website Takeover, wordpress

A critical vulnerability in the Ninja Forms File Uploads premium add-on for WordPress allows uploading arbitrary files without authentication, which can lead to remote code execution. Identified as CVE-2026-0740, the issue is currently exploited in attacks. According to WordPress security company Defiant, its Wordfence firewall blocked more than 3,600 attacks over the past 24 hours. With over 600,000 downloads, […]

2 mins read