Ninja Forms - File Uploads vulnerabilities | LiveThreat CVE Feed

Product

Ninja Forms - File Uploads

by SaturdayDrive · last CVE Oct 2, 2026

CVEs

On KEV

9.8

Max CVSS

New 30D

Severity mix

Critical 1High 2Medium 2Low 0

Severity

Exploitation

Watch

Add Ninja Forms - File Uploads to your stack to get only the CVEs that touch what you run.

CVE	CVSS	EPSS	Published	Summary · affected versions
CVE-2024-1596	6.1	0%	Sep 7	Ninja Forms File Uploads <= 3.3.16 - Unauthenticated Stored Cross-Site Scripting via File Upload Affected: through 3.3.16
CVE-2026-12557	5.3	0%	Jul 3	Ninja Forms - File Uploads <= 3.3.29 - Missing Authorization to Unauthenticated Log Disclosure and Deletion via debug-log/delete-all and debug-log/get-all REST Endpoints Affected: through 3.3.29