SD
Vendor
Saturday Drive
11
CVEs
0
On KEV
1
New 30D
Products
NF9.3
Ninja Forms
Saturday Drive
7 CVEs0 on KEV1 new
NF7.1
Ninja Forms File Uploads Extension
Saturday Drive
1 CVEs0 on KEV0 new
NF8.8
Ninja Forms - Layout & Styles
Saturday Drive
1 CVEs0 on KEV0 new
NF4.3
Ninja Forms - Save Progress
Saturday Drive
1 CVEs0 on KEV0 new
NF6.4
Ninja Forms - Scheduled Exports
Saturday Drive
1 CVEs0 on KEV0 new
Recent CVEs
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2026-67187 New | NF Ninja Forms Saturday Drive | 7.1 | Oct 28 | Ninja Forms WordPress Plugin < 3.15.4 Server-Side Validation Bypass via List Fields |
| CVE-2026-87870 | NF Ninja Forms - Scheduled Exports Saturday Drive | 6.4 | Sep 10 | Ninja Forms - Scheduled Exports <= 3.0.3 - Authenticated (Subscriber+) Stored Cross-Site Scripting via REST API Parameters |
| CVE-2026-15550 | NF Ninja Forms - Save Progress Saturday Drive | 4.3 | Sep 5 | Ninja Forms - Save Progress <= 3.0.30 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Data Deletion via admin-ajax.php with admin_init Hook |
| CVE-2026-81773 | NF Ninja Forms File Uploads Extension Saturday Drive | 7.1 | Sep 3 | WordPress Ninja Forms File Uploads Extension plugin <= 3.3.26 - Cross Site Scripting (XSS) vulnerability |
| CVE-2026-81772 | NF Ninja Forms - Layout & Styles Saturday Drive | 8.8 | Sep 2 | WordPress Ninja Forms - Layout & Styles plugin <= 3.0.31 - PHP Object Injection vulnerability |
| CVE-2026-65052 | NF Ninja Forms Saturday Drive | 7.5 | Jul 21 | Ninja Forms Calculation and Payment Total Tampering via Fail-Open get_calc_value in ListSelect and ListRadio Fields |
| CVE-2026-65051 | NF Ninja Forms Saturday Drive | 6.5 | Jul 21 | Ninja Forms Server-Side Validation Bypass via Client-Controlled Field Metadata Merge in AJAX Submission Handler |
| CVE-2026-65050 | NF Ninja Forms Saturday Drive | 6.5 | Jul 21 | Ninja Forms Missing Authorization in submissions-table Gutenberg Block Discloses Form Submissions to Unauthenticated Visitors |
| CVE-2026-65049 | NF Ninja Forms Saturday Drive | 9.3 | Jul 21 | Ninja Forms Cross-Site Network-Wide Data Deletion on WordPress Multisite via nf_delete_all_data AJAX Action |
| CVE-2026-65048 | NF Ninja Forms Saturday Drive | 9.3 | Jul 21 | Ninja Forms Unauthenticated Stored Cross-Site Scripting via Repeatable Fieldset Submission Index |
| CVE-2024-1596 | NF Ninja Forms Saturday Drive | 6.1 | Sep 7 | Ninja Forms File Uploads <= 3.3.16 - Unauthenticated Stored Cross-Site Scripting via File Upload |