Ninja Forms – Contact Form Builder with Calculators, Quizzes, Signatures & AI Form Builder

Ninja Forms – Contact Form Builder with Calculators, Quizzes, Signatures & AI Form Builder has 90 disclosed vulnerabilities in the WordSec catalog, reported between 2014 and 2026; all 90 are fixed as of October 2026. Their average CVSS score is 6.3, and the most serious one scores 9.8 out of 10. Severity breakdown: 4 critical and 27 high. 2026 was the busiest year with 16 disclosures.

The most common weakness is Improper Neutralization Of Input During Web Page Generation, behind 42 of the records (47%). Other recurring categories include Cross-Site Request Forgery, Exposure Of Sensitive Information To An Unauthorized Actor.

Every one of the 90 issues recorded for Ninja Forms – Contact Form Builder with Calculators, Quizzes, Signatures & AI Form Builder has a vendor fix available, so running the current release closes all known holes.

56 independent researchers contributed these findings, most of them (6) reported by Chloe Chamberland. Ninja Forms – Contact Form Builder with Calculators, Quizzes, Signatures & AI Form Builder is installed on roughly 500,000 WordPress sites, so each unpatched flaw has a wide blast radius. The current release is tested up to WordPress 7.1.4.

01234567891021.12.2011Today06.11.20146.1Ninja Forms Contact Form – The Drag and Drop Form Builder for WordPress <= 2.8.6 - Reflected Cross-Site Scripting CVSS 6.1 · 06.11.201420.11.20147.2Ninja Forms Contact Form <= 2.8.8 - Stored Cross-Site Scripting CVSS 7.2 · 20.11.201402.12.20146.1Ninja Forms Contact Form – The Drag and Drop Form Builder for WordPress <= 2.8.8 - Reflected Cross-Site Scripting CVSS 6.1 · 02.12.201420.04.20156.1Ninja Forms <= 2.9.10 - Reflected Cross-Site Scripting CVSS 6.1 · 20.04.201505.06.20156.1Ninja Forms Contact Form <= 2.9.18 - Cross-Site Scripting CVSS 6.1 · 05.06.201504.08.20155.4Ninja Forms Contact Form <= 2.9.21 - Reflected Cross-Site Scripting CVSS 5.4 · 04.08.201530.09.20158.4Ninja Forms Contact Form <= 2.9.27 - CSV Injection CVSS 8.4 · 30.09.201508.12.20157.2Ninja Forms Contact Form <= 2.9.28 - Stored Cross-Site Scripting CVSS 7.2 · 08.12.201505.05.20169.8Ninja Forms Contact Form 2.9.36 - 2.9.42 - Unauthenticated Arbitrary File Upload CVSS 9.8 · 05.05.201613.05.20168.1Ninja Forms Contact Form 2.9.36 - 2.9.42 - PHP Object Injection CVSS 8.1 · 13.05.201619.07.20166.1Ninja Forms Contact Form <= 2.9.51 - Multiple Reflected Cross-Site Scripting CVSS 6.1 · 19.07.201616.08.20168.8Ninja Forms Contact Form <= 2.9.55.1 - Authenticated SQL Injection CVSS 8.8 · 16.08.201607.03.20176.1Ninja Forms Contact Form – The Drag and Drop Form Builder for WordPress <= 3.0.30 - HTML Injection CVSS 6.1 · 07.03.201717.04.20175.3Ninja Forms Contact Form – The Drag and Drop Form Builder for WordPress <= 3.0.31 - Arbitrary Wordpress Shortcode Injection CVSS 5.3 · 17.04.201720.02.20186.1Ninja Forms Contact Form <= 3.2.13 - Cross-Site Scripting CVSS 6.1 · 20.02.201826.02.20187.5Ninja Forms Contact Form <= 3.2.14 - Parameter Tampering CVSS 7.5 · 26.02.201806.07.20189.1Ninja Forms <= 3.3.8 - Insufficient Restrictions during Export Personal Data requests CVSS 9.1 · 06.07.201819.08.20188.6Ninja Forms Contact Form <= 3.3.13 - CSV Injection CVSS 8.6 · 19.08.201827.08.20188.3Ninja Forms Contact Form – The Drag and Drop Form Builder for WordPress <= 3.3.13 - Cross-Site Scripting CVSS 8.3 · 27.08.201815.11.20186.1Ninja Forms Contact Form <= 3.3.17 - Cross-Site Scripting via begin_date, end_date, or form_id Parameter CVSS 6.1 · 15.11.201801.12.20184.7Ninja Forms Contact Form <= 3.3.19 - Authenticated Open Redirect CVSS 4.7 · 01.12.201807.01.20199.8Ninja Forms Contact Form <= 3.3.21.1 - SQL Injection CVSS 9.8 · 07.01.201903.02.20206.4Ninja Forms Contact Form <= 3.4.22 - Stored Cross-Site Scripting CVSS 6.4 · 03.02.202028.04.20206.1Ninja Forms Contact Form <= 3.4.24.1 - Cross-Site Request Forgery leading to Stored Cross-Site Scripting CVSS 6.1 · 28.04.202020.09.20206.5Ninja Forms Contact Form – The Drag and Drop Form Builder for WordPress <= 3.4.27.1 - Stored Cross-Site Scripting CVSS 6.5 · 20.09.202022.09.20208.8Ninja Forms Contact Form – The Drag and Drop Form Builder for WordPress <= 3.4.27 - Cross-Site Request Forgery to Plugin Installation CVSS 8.8 · 22.09.20205.3Ninja Forms Contact Form – The Drag and Drop Form Builder for WordPress <= 3.4.27 - Validation Bypass via Email Field CVSS 5.3 · 22.09.202016.02.20218.8Ninja Forms Contact Form <= 3.4.33 - Authenticated SendWP Plugin Installation and Client Secret Key Disclosure CVSS 8.8 · 16.02.20214.3Ninja Forms <= 3.4.34 - Authenticated OAuth Connection Key Disclosure CVSS 4.3 · 16.02.20216.1Ninja Forms Contact Form <= 3.4.33 - Administrator Open Redirect CVSS 6.1 · 16.02.20215.4Ninja Forms Contact Form <= 3.4.33 - Cross-Site Request Forgery to OAuth Service Disconnection CVSS 5.4 · 16.02.202122.09.20216.5Ninja Forms <= 3.5.7 - Unprotected REST-API to Sensitive Information Disclosure CVSS 6.5 · 22.09.20216.4Ninja Forms <= 3.5.7 - Unprotected REST-API to Email Injection CVSS 6.4 · 22.09.202127.09.20214.8Ninja Forms <= 3.5.8.1 - Cross-Site Scripting CVSS 4.8 · 27.09.202126.10.20217.2Ninja Forms Contact Form <= 3.6.3 - Authenticated SQL Injection CVSS 7.2 · 26.10.202122.03.20225.3Ninja Forms Contact Form – The Drag and Drop Form Builder for WordPress <= 3.6.7 - Email Address Disclosure CVSS 5.3 · 22.03.202207.06.20228.8Ninja Forms Contact Form – The Drag and Drop Form Builder for WordPress <= 3.6.9 - Cross-Site Request Forgery to Field Import and PHP Object Injection CVSS 8.8 · 07.06.20225.5Ninja Forms Contact Form <= 3.6.9 - Authenticated (Admin+) Cross-Site Scripting via label CVSS 5.5 · 07.06.202210.06.20225.5Ninja Ninja Forms Contact Form <= 3.6.10 - Authenticated (Admin+) Stored Cross-Site Scripting via import CVSS 5.5 · 10.06.202213.06.20224.8Ninja Forms Contact Form <= 3.6.9 - Cross-Site Scripting via field label CVSS 4.8 · 13.06.202215.06.20229.8Ninja Forms Contact Form – The Drag and Drop Form Builder for WordPress <= 3.6.10 - Code Injection CVSS 9.8 · 15.06.202205.09.20227.2Ninja Forms Contact Form – The Drag and Drop Form Builder for WordPress <= 3.6.12 - Authenticated (Administrator+) PHP Objection Injection CVSS 7.2 · 05.09.202224.04.20236.1Ninja Forms Contact Form <= 3.6.21 - Reflected Cross-Site Scripting via 'title' CVSS 6.1 · 24.04.202322.06.20236.5Ninja Forms <= 3.6.24 - Authenticated (Admin+) Arbitrary File Deletion CVSS 6.5 · 22.06.202307.07.20235.3Ninja Forms <= 3.6.25 - Denial of Service via Large Form Submissions CVSS 5.3 · 07.07.202325.07.20234.3Ninja Forms <= 3.6.25 - Missing Authorization to Form Submission Export CVSS 4.3 · 25.07.20236.1Ninja Forms <= 3.6.25 - Reflected Cross-Site Scripting via 'data' CVSS 6.1 · 25.07.20235.3Ninja Forms <= 3.6.25 - Missing Authorization to Contributor+ Form Submission Export CVSS 5.3 · 25.07.202307.08.20234.4Ninja Forms <= 3.6.25 - Authenticated (Administrator+) Stored HTML Injection CVSS 4.4 · 07.08.202316.10.20234.4Ninja Forms Contact Form <= 3.6.33 - Authenticated (Admin+) Stored Cross-Site Scripting CVSS 4.4 · 16.10.202301.02.20245.9Ninja Forms Contact Form <= 3.7.1 - Unauthenticated Second Order SQL Injection CVSS 5.9 · 01.02.202428.03.20244.6Ninja Forms Contact Form – The Drag and Drop Form Builder for WordPress <= 3.8.0 - Authenticated (Author+) Stored Cross-Site Scripting CVSS 4.6 · 28.03.20244.3Ninja Forms Contact Form – The Drag and Drop Form Builder for WordPress <= 3.8.0 - Cross-Site Request Forgery to Publicly Accessible Form Submission Export CVSS 4.3 · 28.03.202408.04.20244.4Ninja Forms – The Contact Form Builder That Grows With You <= 3.8.0 - Authenticated (Admin+) Stored Cross-Site Scripting CVSS 4.4 · 08.04.20244.4Ninja Forms – The Contact Form Builder That Grows With You <= 3.8.0 - Authenticated (Admin+) Stored Cross-Site Scripting CVSS 4.4 · 08.04.202404.07.20244.3Ninja Forms <= 3.8.4 - Authenticated (Subscriber+) Arbitrary Shortcode Execution CVSS 4.3 · 04.07.202424.07.20244.3Ninja Forms <= 3.8.6 - Cross-Site Request Forgery CVSS 4.3 · 24.07.202412.08.20246.1Ninja Forms – The Contact Form Builder That Grows With You <= 3.8.10 - Reflected Cross-Site Scripting CVSS 6.1 · 12.08.202428.08.20244.4Ninja Forms <= 3.8.11 - Authenticated (Administrator+) Stored Cross-Site Scripting CVSS 4.4 · 28.08.202424.09.20244.7Ninja Forms Contact Form <= 3.8.15 - Reflected Self-Based Cross-Site Scripting via Referer CVSS 4.7 · 24.09.202428.10.20244.4Ninja Forms – The Contact Form Builder That Grows With You <= 3.8.17 - Authenticated (Admin+) Stored Cross-Site Scripting CVSS 4.4 · 28.10.20244.4Ninja Forms – The Contact Form Builder That Grows With You <= 3.8.17 - Authenticated (Admin+) Stored Cross-Site Scripting CVSS 4.4 · 28.10.202411.12.20247.2Ninja Forms – The Contact Form Builder That Grows With You <= 3.8.19 - Unauthenticated Stored Cross-Site Scripting via Form Calculations CVSS 7.2 · 11.12.202428.12.20246.3Ninja Forms – The Contact Form Builder That Grows With You <= 3.8.22 - Authenticated (Subscriber+) Arbitrary Shortcode Execution CVSS 6.3 · 28.12.202429.01.20256.4Ninja Forms – The Contact Form Builder That Grows With You <= 3.8.24 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode CVSS 6.4 · 29.01.202528.04.20254.4Ninja Forms – The Contact Form Builder That Grows With You <= 3.10.0 - Authenticated (Admin+) Stored Cross-Site Scripting CVSS 4.4 · 28.04.20254.4Ninja Forms – The Contact Form Builder That Grows With You <= 3.10.0 - Authenticated (Admin+) Stored Cross-Site Scripting CVSS 4.4 · 28.04.20254.4Ninja Forms – The Contact Form Builder That Grows With You <= 3.10.0 - Authenticated (Admin+) Stored Cross-Site Scripting CVSS 4.4 · 28.04.202526.06.20256.4Ninja Forms <= 3.10.2.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via CSTI CVSS 6.4 · 26.06.202528.08.20258.1Ninja Forms <= 3.11.0 - Unauthenticated PHP Object Injection CVSS 8.1 · 28.08.202526.09.20254.3Ninja Forms – The Contact Form Builder That Grows With You <= 3.12.0 - Cross-Site Request Forgery to Limited File Deletion CVSS 4.3 · 26.09.20254.3Ninja Forms – The Contact Form Builder That Grows With You <= 3.12.0 - Cross-Site Request Forgery to Plugin Settings Update CVSS 4.3 · 26.09.202512.12.20257.5Ninja Forms <= 3.13.2 - Missing Authorization to Unauthenticated Submission Disclosure CVSS 7.5 · 12.12.202516.12.20257.5Ninja Forms – The Contact Form Builder That Grows With You <= 3.13.2 - Insecure Direct Object Reference to Unauthenticated Sensitive Information Exposure via Unscoped Bearer Token CVSS 7.5 · 16.12.202509.02.20267.5Ninja Forms <= 3.14.0 - Unauthenticated Information Disclosure in nf_ajax_submit AJAX Action CVSS 7.5 · 09.02.202627.03.20266.5Ninja Forms <= 3.14.1 - Authenticated (Contributor+) Sensitive Information Disclosure via Block Editor Token CVSS 6.5 · 27.03.202630.06.20267.5Ninja Forms <= 3.14.1 - Missing Authorization to Unauthenticated Sensitive Information Disclosure via token/refresh REST Endpoint CVSS 7.5 · 30.06.202623.07.20264.9Ninja Forms <= 3.14.9 - Authenticated (Administrator+) SQL Injection via Import File 'settings' Key CVSS 4.9 · 23.07.202627.07.20265.3Ninja Forms <= 3.14.9 - Unauthenticated Arbitrary Shortcode Execution CVSS 5.3 · 27.07.202602.09.20263.1Ninja Forms – The Contact Form Builder That Grows With You 3.14.0 - 3.15.1 - Authenticated (Custom Role+) Information Exposure CVSS 3.1 · 02.09.202604.09.20266.5Ninja Forms – The Contact Form Builder That Grows With You 3.14.10 - 3.15.1 - Unauthenticated Arbitrary Shortcode Execution CVSS 6.5 · 04.09.20267.2Ninja Forms <= 3.15.1 - Unauthenticated Stored Cross-Site Scripting via Repeater Child 'type' Confusion via Unmatched Array Key CVSS 7.2 · 04.09.202608.09.20266.6Ninja Forms <= 3.14.6 - Authenticated (Administrator+) PHP Object Injection via Form Import CVSS 6.6 · 08.09.202621.09.20267.2Ninja Forms – The Contact Form Builder That Grows With You <= 3.15.3 - Unauthenticated Stored Cross-Site Scripting CVSS 7.2 · 21.09.202622.09.20268.1Ninja Forms <= 3.15.3 - Unauthenticated PHP Object Injection CVSS 8.1 · 22.09.20267.2Ninja Forms <= 3.15.3 - Unauthenticated Stored Cross-Site Scripting CVSS 7.2 · 22.09.202623.09.20267.2Ninja Forms – Contact Form Builder with Calculators, Quizzes, Signatures & AI Form Builder <= 3.15.3 - Unauthenticated Stored Cross-Site Scripting CVSS 7.2 · 23.09.202630.09.20267.2Ninja Forms – Contact Form Builder with Calculators, Quizzes, Signatures & AI Form Builder <= 3.15.3 - Unauthenticated Stored Cross-Site Scripting CVSS 7.2 · 30.09.202601.10.20267.2Ninja Forms <= 3.15.4 - Unauthenticated Stored Cross-Site Scripting via Paragraph Text (RTE) Field Submission CVSS 7.2 · 01.10.202619.10.20267.2Ninja Forms – Contact Form Builder with Calculators, Quizzes, Signatures & AI Form Builder <= 3.15.5 - Unauthenticated Stored Cross-Site Scripting CVSS 7.2 · 19.10.2026

Strategic Overview

Avg CVSSMedium
6.3/ 10
Patch Coverage100%
Open

0

Fixed

90

Get automatic notifications for all Ninja Forms – Contact Form Builder with Calculators, Quizzes, Signatures & AI Form Builder vulnerabilities before they are exploited.

Highest severity on recordCVSS 9.8

Ninja Forms Contact Form – The Drag and Drop Form Builder for WordPress <= 3.6.10 - Code Injection

Read the full analysis

Vulnerability Records

90 records
2026-10-19 07:48CVE-2026-110899
7.2
High
Kwak Do HunYes
2026-10-01 17:13CVE-2026-90438
7.2
High
UKOYes
2026-09-30 11:39CVE-2026-102385
7.2
High
IntrudifyYes
2026-09-23 10:48CVE-2026-95515
7.2
High
DthangwsYes
2026-09-22 00:00CVE-2026-91827
8.1
High
Karthik RamakrishnanYes
2026-09-22 00:00CVE-2026-92438
7.2
High
Venkateswara Reddy ChallaYes
2026-09-21 18:15CVE-2026-94504
7.2
High
Hippolyte Quéré (Hippie) (Hippie)Yes
2026-09-08 14:33CVE-2026-11363
6.6
Medium
DungNhiYes
2026-09-04 17:43CVE-2026-19769
7.2
High
Jonah Burgess (CryptoCat)Yes
2026-09-04 00:00CVE-2026-80437
6.5
Medium
Jakub HermanYes
Showing 1–10 of 90 reports
Ninja Forms – Contact Form Builder with Calculators, Quizzes, Signatures & AI Form Builder banner
Latestv3.15.7

Ninja Forms – Contact Form Builder with Calculators, Quizzes, Signatures & AI Form Builder

Kevin Stover

Author

Kevin Stover

4.4(1,397)
88/100
Last Updated
2026-10-26 (4d ago)
Active Installs
500,000+
Downloads
64,454,504
Requires WP
6.9+
Requires PHP
7.4+
Tested up to
WP 7.1.4
Created
2011-12-21 (15y ago)

Ninja Forms is a free WordPress form builder plugin. Build contact forms, lead generation forms, calculators, quizzes, surveys, applications, event registration, and booking request forms with a drag and drop builder, or describe the form you want and let the built-in AI form builder draft it for you. Every submission is stored in your own WordPress database, with no limit on forms or submissions and nothing to pay to see them. The form builder that grows with you Ninja Forms has been part of WordPress since 2011. It started as a volunteer project for a local nonprofit and today it powers classrooms, clinics, nonprofits, online stores, farms, agencies, and government offices, from a single contact form to advanced business workflows. The free plugin is the complete product for getting started, not a teaser. Calculations, signatures, star ratings, repeatable field groups, spam protection, submission management, and the AI form builder all ship in core. When you need more, premium features come as individual add-ons you can buy one at a time, and memberships bundle them for the moment when buying them one by one stops making sense. We only grow when the sites running Ninja Forms do. We also respect your privacy and your time. No unsolicited emails, no aggressive marketing, no paywalling of basic features, and we never see or collect the data your forms collect. Our support team helps every user, free or paid. Free in Ninja Forms, paid almost everywhere else Several features that other form builders reserve for paid plans are part of the free Ninja Forms plugin: Calculations. Assign values to fields and options, combine them with formulas, and show running totals for quotes, order forms, quizzes, and every kind of calculator. Lead capture. Every submission lands in your inbox the moment it arrives and in your WordPress dashboard for export, with honeypot, reCAPTCHA, hCaptcha, Turnstile, and Akismet spam protection built in. Signatures. A typed or drawn signature field for agreements, waivers, and applications. Repeatable fieldsets. Let visitors add another guest, another line item, or another reference without you predicting how many they need. Star ratings. A clickable rating scale for feedback and survey forms. Your submissions, on your site. Every submission is saved to your WordPress database. View, search, filter, edit, resend notifications, and export to CSV, for every form, with no entry limit. AI form builder. Describe the form you want in plain language and the builder drafts it, then refine it in conversation. It runs on the WordPress AI Client with a provider you connect, so your prompts go where you choose. 31 form fields, all free Text and numbers: Single Line Text, Paragraph Text, Number, Date and Time, Confirm, Hidden Choices: Single Checkbox, Checkbox List, Radio List, Select, Multi-Select, Select Image, Star Rating Contact details: First Name, Last Name, Email, Phone, Address, City, US States, Country, Zip Signature and structure: Signature, Repeatable Fieldset, HTML, Divider, Submit Spam protection: Anti-Spam, reCAPTCHA, hCaptcha, Cloudflare Turnstile Customize any field with default values, placeholders, input masks, required and unique-value rules, and custom CSS classes, then save it as a favorite to reuse on any other form. Emails, confirmations, and actions Send any number of email notifications to any number of recipients on every submission, each with its own subject, message, reply-to, CC, and BCC, in HTML or plain text. Show a custom success message (links and download links included), or redirect to any page. Fire a Google Analytics 4 event on submission for conversion tracking. Use merge tags to drop field values, calculation results, and site data into emails, messages, and other fields. Call your own WordPress action hook on submission when you need custom code. Spam protection on every form A honeypot is active on every form automatically. Add an Anti-Spam question, Google reCAPTCHA v2 or v3, hCaptcha, or Cloudflare Turnstile when you want more, and run submissions through Akismet if the Akismet plugin is installed on your site. Privacy tools built in All submission data stays on your server. Ninja Forms never transmits it and never sees it. Flag any field as personally identifiable information and choose not to store its value. Automated export and erase support for the WordPress privacy tools, plus front-end Export Data Request and Delete Data Request actions so visitors can serve themselves. Control who can submit and where forms appear Restrict a form to logged-in visitors, reject duplicate values in any field (one submission per email address, for example), or cap the total number of submissions. Embed a form with the Ninja Forms block, a shortcode, a widget, or by appending it to any post or page. Share a form by public link with no page at all. Choose title display, heading level, label position, and what happens after a submission, per form. Start faster Nine templates built into the plugin (Contact Us, General Enquiry, Quote Request, Event Registration, Collect Feedback, Questionnaire, Job Application, Export Data Request, Delete Data Request), plus a library of 100 ready-to-import templates on ninjaforms.com, from reservation and food order forms to applications, surveys, and registrations. Download one, import it, and it is ready to edit. Every template page says which add-ons it uses, if any; a few tiles in the plugin’s own picker need a specific add-on and say so when you open them. Duplicate any form, and import or export forms and favorite fields between sites. A rich text editor for HTML fields and email messages. Built for AI agents and developers Ninja Forms supports the WordPress Abilities API, so an AI assistant connected to your site through the WordPress MCP Adapter can build, edit, and check forms, manage submissions, and change settings through 29 permission-checked abilities, the same operations the dashboard performs. Three destructive abilities stay off unless an administrator opts in. Developers get WP-CLI commands, a WordPress action hook on submission, an extensive filter and action ecosystem, and a full documentation library. Accessibility Accessible forms are a core value, not an add-on. Front-end forms are built to our internal standards based on WCAG 2, audited by external accessibility professionals, and regression tested on every update. It is ongoing work; you can read our full Accessibility Statement on ninjaforms.com. Where add-ons come in Some capabilities are add-ons rather than part of the free plugin: conditional logic, file uploads, multi-step forms, payments for order, donation, and event forms, save and resume, layout and styling controls, PDF submissions, user registration, front-end posting, and integrations with email marketing, CRM, and messaging services. Each is purchased on its own, or bundled in a membership. Form features: Conditional Logic, File Uploads, Multi Step Forms, Layout & Styles, Save Progress, Advanced Datepicker, User Analytics, User Management Submissions: PDF Form Submissions, Excel Export, Scheduled Submissions Export, Front End Posting Payments: PayPal Checkout (official partner), Stripe, Authorize.net, Elavon, Recurly Email marketing: Mailchimp, ActiveCampaign, Constant Contact, ConvertKit, AWeber, Campaign Monitor, CleverReach, EmailOctopus, Emma, MailPoet CRM: HubSpot (official partner), Salesforce, Zoho CRM, Capsule, CiviCRM, Insightly, OnePageCRM, PipelineDeals Notifications and automation: Zapier (official partner), Webhooks, Slack, Trello, Help Scout, Twilio SMS, ClickSend SMS More than a plugin Free technical support for every user, whether or not you have bought anything, from a team spanning four continents, Monday to Friday. A full documentation library. Regular updates. Translated into more than 24 languages by the WordPress Polyglots community, with WPML as a long-term partner for more. And an ecosystem-aware approach: we know it is not just you and Ninja Forms, so we work to play well with the rest of your site. You will always have a direct line to us right here. Additional Branding and Trademark Information Ninja Forms® is a registered trademark of Saturday Drive INC. We are a WordPress forms builder, not to be confused with the independent WPForms brand for WordPress. All official Ninja Forms add-ons and memberships can be found on our official website, ninjaforms.com.

Vulnerability data © Defiant, Inc., provided under the Wordfence Intelligence T&C