click5 CRM add-on to Ninja Forms vulnerabilities
We track 2 vulnerabilities in click5 CRM add-on to Ninja Forms products. 2 are rated high or critical, and none are known to be exploited. The most recent was published on October 11, 2026.
2vulnerabilities
1critical
1high
0exploited
9.3average CVSS score
Latest click5 CRM add-on to Ninja Forms vulnerabilities
- 8.8 High severity
click5 CRM add-on to Ninja Forms: Improper Neutralization of Input During Web Page Generation
The click5 CRM add-on to Ninja Forms WordPress plugin through 1.0.1 does not sanitise and escape content submitted through an unauthenticated endpoint before outputting it back in an admin page, leading to Stored XSS which could be used against high privilege
- 9.8 Critical severity
click5 CRM add-on to Ninja Forms: Missing Authorization
The click5 CRM add-on to Ninja Forms WordPress plugin through 1.0.1 does not have authorisation and CSRF checks when updating options via a REST endpoint, and does not ensure that the option to be updated belongs to the click5 CRM add-on to Ninja Forms WordPre