CVE-2026-81772
Received Received - Intake

Unauthenticated PHP Object Injection in Ninja Forms

Publication date: 2026-09-02

Last updated on: 2026-09-02

Assigner: Patchstack

Description
Unauthenticated PHP Object Injection in Ninja Forms - Layout & Styles <= 3.0.31 versions.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-09-02
Last Modified
2026-09-02
Generated
2026-09-02
AI Q&A
2026-09-02
EPSS Evaluated
N/A
NVD
CVE-2026-81772
EUVD
EUVD-2026-69930

Affected Vendors & Products

Showing 1 associated CPE
Vendor Product Version / Range
ninja_forms layout_and_styles to 3.0.31 (inc)

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-502 The product deserializes untrusted data without sufficiently ensuring that the resulting data will be valid.

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

This is an unauthenticated PHP Object Injection vulnerability in the Ninja Forms - Layout & Styles plugin for WordPress, affecting versions 3.0.31 and below. It allows attackers to inject malicious PHP objects that could lead to code execution, SQL injection, or denial of service if a suitable POP chain exists.

Detection Guidance

Detecting this vulnerability requires checking if the Ninja Forms - Layout & Styles plugin version 3.0.31 or below is installed on your WordPress site. You can use commands like 'wp plugin list' in WP-CLI or inspect the plugin files in the /wp-content/plugins/ninja-forms-layout-and-styles/ directory for version details.

Impact Analysis

An attacker could trick a privileged user into clicking a malicious link or submitting a form, leading to potential code execution, data theft, or service disruption. The high CVSS score of 8.8 indicates significant risk of exploitation.

Mitigation Strategies

Immediately apply the Patchstack mitigation rule if available, or disable the plugin until an official patch is released. Update the plugin to the latest version if a fix becomes available. Consider seeking assistance from your hosting provider or a developer for proper mitigation.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-81772. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart