CVE-2026-1239Disclosure

LOWCVSS 7.5 · HIGH

Signal is active with 1 mentions in latest observed window

Immediate actions

Patch affected systems immediately

Recommended action window: Monitor and triage in normal cycle

NVD description

The Ninja Forms – The Contact Form Builder That Grows With You plugin for WordPress is vulnerable to unauthorized access of data due to a missing authorization check on the 'ninja-forms-views/token/refresh' REST callback in all versions up to, and including, 3.14.1. This makes it possible for unauthenticated attackers to view form submissions, which could potentially contain sensitive information.

Back to dashboard

0.5/ 10 priority

Sources & remediation

Other references

Weakness type (CWE)

CWE-862

Priority

LOW

Exploitation

NONE

PoC

NONE

Patch

AVAILABLE

Momentum

STABLE

Threat summary

Patch or workaround signal is available
3 mentions across 3 observed days
Momentum state: stable

What's happening

Patch or workaround mentioned in 1 signal
Technical details provided in 3 signals
Disclosure: 2 classified signals
Peaked 2d ago at 1 mentions (2026-06-12); latest day: 1
3 total mentions across 3 days

Deep dive

Activity timeline3 mentions / 3d

Signal classification2 categories

Disclosure

266.7%

Patch

133.3%

Referenced assets1 URL

By indicator

https://www.valtersit.com/cve/CVE-2026-1239

Classification over time

Date	Total	Labels

2026-06-12	1	Disclosure1
2026-06-13	1	Disclosure1
2026-07-01	1	Patch1

Full discourse3 posts

Hugo | DevOps | Cybersecurity 🇱🇻@HugoValters118d
Patch
#CVE-2026-1239 - Missing Authorization in Ninja Forms plugin for #WordPress. Unauthenticated access to form submissions, potentially exposing sensitive data. #CVSS 7.5. Update immediately. #CVEAlert #WordPress #infosec #sysadmin #devsecops #devops More info: https://www.valtersit.com/cve/CVE-2026-1239
Post summary
The post identifies a missing authorization flaw in the Ninja Forms WordPress plugin with a CVSS of 7.5 and urges users to apply updates immediately.
0000052
968 followersView on X
takenaka hiroya@Joe_Biden_ja136d
Disclosure
CVE-2026-1239: Linuxカーネルに権限昇格の脆弱性が発見。CVSSスコアは7.2。各ディストリビューションの対応が注目される。
Post summary
A privilege‑escalation flaw (CVE‑2026‑1239) affecting the Linux kernel has been announced, with a CVSS score of 7.2 and attention turning to distributions’ responses.
0000034
564 followersView on X
takenaka hiroya@Joe_Biden_ja137d
Disclosure
CVE-2026-1239、OracleデータベースにおけるSQLインジェクションの脆弱性。CVSSスコアは9.2。深刻な影響を与えるため、優先的な対処が求められる。
Post summary
An Oracle database SQL injection vulnerability (CVE-2026-1239) with a CVSS score of 9.2 has been disclosed, highlighting the need for urgent remediation.
0000025
564 followersView on X

Explore more

Back to dashboard