Login Request a demo
NF
Product
Ninja Forms - File Uploads
by SaturdayDrive · last CVE Oct 2, 2026
5
CVEs
0
On KEV
9.8
Max CVSS
1
New 30D
Vulnerabilities5In the news0Timeline
Severity mix
Critical 1High 2Medium 2Low 0
Severity
All severities5Critical1High2Medium2Low0
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add Ninja Forms - File Uploads to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2026-0740
9.8
63%
Apr 7
Ninja Forms - File Upload <= 3.3.26 - Unauthenticated Arbitrary File Upload
Affected: through 3.3.26
CVE-2026-92820
8.1
1%
Oct 2
Ninja Forms - File Uploads <= 3.3.34 - Unauthenticated Arbitrary File Upload
Affected: through 3.3.34
CVE-2026-13369
7.5
1%
Jul 2
Ninja Forms - File Uploads <= 3.3.29 - Unauthenticated Arbitrary File Read via File Upload Field 'files[].data.file_path' Parameter
Affected: through 3.3.29
CVE-2024-1596
6.1
0%
Sep 7
Ninja Forms File Uploads <= 3.3.16 - Unauthenticated Stored Cross-Site Scripting via File Upload
Affected: through 3.3.16
CVE-2026-12557
5.3
0%
Jul 3
Ninja Forms - File Uploads <= 3.3.29 - Missing Authorization to Unauthenticated Log Disclosure and Deletion via debug-log/delete-all and debug-log/get-all REST Endpoints
Affected: through 3.3.29
Showing 5