Popup addon for Ninja Forms

Popup addon for Ninja Forms has 2 disclosed vulnerabilities in the WordSec catalog, all reported in 2025; all 2 are fixed as of September 2026. Their average CVSS score is 5.4, and the most serious one scores 6.4 out of 10. 2025 was the busiest year with 2 disclosures.

The most common weakness is Cross-Site Scripting, behind 2 of the records (100%).

Every one of the 2 issues recorded for Popup addon for Ninja Forms has a vendor fix available, so running the current release closes all known holes.

2 independent researchers contributed these findings, one record each. Popup addon for Ninja Forms is installed on roughly 900 WordPress sites, so each unpatched flaw has a wide blast radius. The current release is tested up to WordPress 6.8.8.

Strategic Overview

Avg CVSSMedium

5.4/ 10

Patch Coverage100%

Open

Fixed

Get automatic notifications for all Popup addon for Ninja Forms vulnerabilities before they are exploited.

Highest severity on recordCVSS 6.4CVE-2025-53279

Popup addon for Ninja Forms <= 3.4 - Authenticated (Contributor+) Stored Cross-Site Scripting

Read the full analysis

Vulnerability Records

2 records


2025-10-31 00:00	Popup addon for Ninja Forms <= 3.5.1 - Authenticated (Administrator+) Stored Cross-Site Scripting Popup addon for Ninja Forms <= 3.5.1	`CVE-2025-64264`	4.4 Medium	Kim YunJi	Yes
2025-06-27 00:00	Popup addon for Ninja Forms <= 3.4 - Authenticated (Contributor+) Stored Cross-Site Scripting Popup addon for Ninja Forms <= 3.4	`CVE-2025-53279`	6.4 Medium	Muhammad Yudha - DJ	Yes

Showing 1–2 of 2 reports

Latestv3.5.2

Popup addon for Ninja Forms

Author

Aman

3.8(6)

76/100

Last Updated

2025-11-04 (10mo ago)

Active Installs

900+

Downloads

38,472

Requires WP

4.4+

Requires PHP

Tested up to

WP 6.8.8

Created

2017-07-28 (9y ago)

Popup Addon for Ninja Forms allows you to show any Ninja Forms in Popup/Modal. You can create beautiful popups with live preview in customizer. It allows you add additional content before & after the form in popup. Popup can be triggered by click or can be opened on page load using the shortocde. Top Features: Option to set Popup Cookie to hide it after opened certain number of times. Option to set Popup Animations. Option to set Popup Container Width for mobile. Option to set Popup Container Height for mobile. Option to set Overlay color. Option to set Overlay opacity. Option to set Popup Container opacity. Option to set Popup Container background color. Option to set Popup Container Padding. Option to set Popup Container Border. Option to set Popup Container Rounded Corners. Option to set Popup Container Width. Option to set Popup Container Height. Option to open popup by any link using class or ID. Get more features in Pro version * Advanced Animations * Exit Intent * Hide Popup on Mobile/Desktop. Get Popup Addon for Ninja Forms PRO!

View on WordPress.org