CVE-2026-81772 HIGH

CVE-2026-81772: WordPress Ninja Forms - Layout & Styles plugin <= 3.0.31 - PHP Object Injection vulnerability

Vendor Saturday Drive
Product Ninja Forms - Layout & Styles
Weakness CWE-502 · Unsafe deserialization
Published September 2, 2026
Last update September 3, 2026
View on NVD All CVEs

CVSS base score

8.8/10
Attack vector Network
Attack complexity Low
Privileges required None
User interaction Required
Confidentiality High
Integrity High

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

What the vulnerability does

01Description

Unauthenticated PHP Object Injection in Ninja Forms - Layout & Styles <= 3.0.31 versions.

Key dates

02Disclosure timeline

September 2, 2026 CVE published
September 3, 2026 Record updated

Related vulnerabilities

04Related CVE

CVE-2026-27060 WordPress ARMember Premium plugin <= 7.0 - PHP Object Injection vulnerability CVE-2026-65571 WordPress 69 Clothing theme <= 1.2.11.1 - PHP Object Injection vulnerability CVE-2026-78257 WordPress Booking and Rental Manager plugin <= 2.7.5 - PHP Object Injection vulnerability CVE-2026-65579 WordPress Agricola theme <= 1.21.0 - PHP Object Injection vulnerability CVE-2026-27414 WordPress Werkstatt theme <= 4.8.3 - PHP Object Injection vulnerability