Ninja Forms - File Uploads vulnerabilities | LiveThreat CVE Feed

Product

Ninja Forms - File Uploads

by SaturdayDrive · last CVE Oct 2, 2026

CVEs

On KEV

9.8

Max CVSS

New 30D

Severity mix

Critical 1High 2Medium 2Low 0

Severity

Exploitation

Watch

Add Ninja Forms - File Uploads to your stack to get only the CVEs that touch what you run.

CVE	CVSS	EPSS	Published	Summary · affected versions
CVE-2026-92820	8.1	1%	Oct 2	Ninja Forms - File Uploads <= 3.3.34 - Unauthenticated Arbitrary File Upload Affected: through 3.3.34
CVE-2026-13369	7.5	1%	Jul 2	Ninja Forms - File Uploads <= 3.3.29 - Unauthenticated Arbitrary File Read via File Upload Field 'files[].data.file_path' Parameter Affected: through 3.3.29