What is the CVSS score of EUVD-2026-29450?

EUVD-2026-29450 has a CVSS 3.1 base score of 8.5 (High). CVSS vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:L. EPSS exploitation probability: 0.0%.

Which versions of Ninja Forms Views are affected by EUVD-2026-29450?

Ninja Forms Views plugin versions 3.3.2 and earlier contain a blind SQL injection vulnerability that allows low-privileged authenticated users to extract sensitive database information, potentially…

Ninja Forms Views EUVD-2026-29450

Q: How to fix or mitigate EUVD-2026-29450?

Within 24 hours: Identify all WordPress installations running Ninja Forms Views and document current plugin version via admin dashboard. Within 7 days: Disable or deactivate Ninja Forms Views plugin on all affected installations as interim mitigation, or restrict user role assignments to prevent low-privilege user access to the plugin's functionality. Within 30 days: Monitor Patchstack advisory and vendor release channels for patched versions ≥3.3.3; apply immediately upon availability and conduct database access audit to detect any suspicious queries from the vulnerability window.

| CVE-2026-42741 HIGH

SQL Injection (CWE-89)

2026-05-12 Patchstack

GHSA-rvq8-mhp5-38gf

SQLi

8.5

CVSS 3.1

CVSS VectorNVD

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:L

Attack Vector

Network

Attack Complexity

Low

Privileges Required

Low

User Interaction

None

Scope

Changed

Confidentiality

High

Integrity

None

Availability

Low

Lifecycle Timeline

Analysis Generated

May 12, 2026 - 11:31 vuln.today

CVE Published

May 12, 2026 - 11:02 nvd

HIGH 8.5

DescriptionNVD

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Aman Ninja Forms Views – Display & Edit Ninja Forms Submissions on your site frontend views-for-ninja-forms allows Blind SQL Injection.This issue affects Ninja Forms Views – Display & Edit Ninja Forms Submissions on your site frontend: from n/a through <= 3.3.2.

AnalysisAI

Blind SQL injection in Ninja Forms Views plugin (versions ≤3.3.2) allows authenticated attackers with low-level privileges to extract sensitive database information via specially crafted queries. The vulnerability carries an 8.5 CVSS score with scope change, enabling attackers to access data beyond the plugin's normal authorization boundaries. …

RemediationAI

Within 24 hours: Identify all WordPress installations running Ninja Forms Views and document current plugin version via admin dashboard. Within 7 days: Disable or deactivate Ninja Forms Views plugin on all affected installations as interim mitigation, or restrict user role assignments to prevent low-privilege user access to the plugin's functionality. …

Analysis

Detailed AI-generated intelligence summary covering attack vector, impact assessment, affected versions, remediation steps, and indicators of compromise.

POChttps://••••••••••.com/exploit

PATCHhttps://••••••••••.com/patch

ADVISORYhttps://••••••••••.com/advisory

Full analysis requires sign-in

Get intelligence summaries, risk assessment, exploit details, threat intel, and remediation guidance.

EUVD-2026-29450 vulnerability details – vuln.today

Back