CVE-2026-81772

Ninja Forms versions up to 3.0.31 are vulnerable to unauthenticated PHP Object Injection, allowing attackers to exploit this flaw to execute arbitrary code on the server. This high-severity vulnerability poses a significant risk to any installations of Ninja Forms, particularly those handling sensitive data or user submissions. Organizations using affected versions should prioritize immediate updates to mitigate potential exploitation.