CVE-2020-8594

MEDIUM 5.4CVE-2020-8594 · Published 14/02/2020 · updated 17/06/2026

In short

CVE-2020-8594 is a MEDIUM (CVSS 5.4) vulnerability affecting ninja forms (ninjaforms).
Chance of exploitation in the next 30 days (EPSS): 1.2%, higher than 68.1% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
ninja forms ninjaforms	`= 3.4.22`	No fix yet

Description

The Ninja Forms plugin 3.4.22 for WordPress has Multiple Stored XSS vulnerabilities via ninja_forms[recaptcha_site_key], ninja_forms[recaptcha_secret_key], ninja_forms[recaptcha_lang], or ninja_forms[date_format].

References

spider-security.co.uk/blog-cve-cve-2020-8594 · Exploit
wordpress.org/plugins/ninja-forms · Vendor Advisory
wpvulndb.com/vulnerabilities/10070 · Third Party Advisory

More vulnerabilities in ninja forms

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free

Package

Affected versions

Patched versions

ninja forms

ninjaforms

= 3.4.22

No fix yet

More vulnerabilities in ninja forms

See all →