The Ninja Forms WordPress Ninja Forms Contact Form WordPress plugin prior to 3.6.26 was affected by a HTML Injection security vulnerability.
ninjaforms ninja forms contact form