Home / Vulnerability Intelligence / CVE-2026-42741

CVE-2026-42741 - Vulnerability Analysis

HighCVSS: 8.5

Last Updated: May 12, 2026

Aman Ninja Forms Views - SQL Injection

Published: May 12, 2026Updated: May 12, 2026Remote Exploitable

Overview

Aman Ninja Forms Views - Display & Edit Ninja Forms Submissions on your site frontend <= 3.3.2 contains a sql injection caused by improper neutralization of special elements in SQL commands, letting attackers perform blind SQL injection remotely, exploit requires crafted input.

Severity & Score

Severity: High

CVSS Score: 8.5

EPSS Score: 3.0%(Probability of exploitation in next 30 days)

Impact

Attackers can perform blind SQL injection to extract sensitive data from the database.

Mitigation

Update to the latest version beyond 3.3.2.

References

https://patchstack.com/database/Wordpress/Plugin/views-for-ninja-forms/vulnerability/wordpress-ninja-forms-views-display-edit-ninja-forms-submissions-on-your-site-frontend-plugin-3-3-2-sql-injection-vulnerability?_s_id=cve

Social Media Activity(2 posts)

TheHackerWire

@thehackerwire

May 12, 2026

🟠 CVE-2026-42741 - High (8.5) Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Aman Ninja Forms Views – Display & Edit Ninja Forms Submissions on your site frontend views-for-ninja-forms allows Blind SQL Injection.... 🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-42741/ #CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

View original post

TheHackerWire

@thehackerwire

May 12, 2026

View original post

Related Resources

Details

CVE ID: CVE-2026-42741
Severity: High
CVSS Score: 8.5
Type: sql_injection
Status: rejected
EPSS: 3.0%
Social Posts: 2

CWE

CWE-89

CVSS Metrics

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:L

EPSS Score

3.0%Probability of exploitation in the next 30 days