cleantalk
Vulnerabilities and Security Researches

Ninja Forms Contact Form – The Drag and Drop Form Builder for WordPress, PSC-2026-64678

PSC, Research URL

PSC-2026-64678

Published on
Jul 28, 2026
Research Description
Form builders accept untrusted input from public visitors and turn it into stored records, notifications, and administrator workflows. Secure validation, permission checks, and careful output handling are central to every submission path. Ninja Forms - The Contact Form Builder That Grows With You version 3.14.11 has successfully completed the CleanTalk Plugin Security Certification process and received PSC-2026-64678, confirming that the plugin was reviewed from a secure code perspective with attention to public submissions, field validation, stored form settings, administrator actions, notifications, and data exposure.
Affected versions
Min 3.15.1, max 3.15.1.
Status
SAFE & CERTIFIED