A vulnerability labeled as problematic has been found in kstover Ninja Forms Plugin up to 3.14.1 on WordPress. This affects the function admin_enqueue_scripts of the file blocks/bootstrap.php. Executing a manipulation can lead to information disclosure.

This vulnerability is registered as CVE-2026-1307. It is possible to launch the attack remotely. No exploit is available.