CVE-2026-65049: Critical Vulnerability in Ninja Forms Plugin for WordPress Multisite
A critical vulnerability (CVE-2026-65049, CVSS 9.3) exists in the Ninja Forms plugin (version 3.14.8 and prior) for WordPress Multisite. This incorrect authorization vulnerability allows a subsite Administrator to trigger network-wide deletion of all Ninja Forms data without requiring super-admin or network-admin privileges. Immediate action is required to update to version 3.14.9 or later.