Skip to content
Saturdaydrive vulnerabilities
Newest
-
saturdaydrive ninja forms - file uploads
Ninja Forms - File Uploads <= 3.3.34 - Unauthenticated Arbitrary File Upload
CVE-2026-92820
8.1 High
-
saturdaydrive ninja forms - excel export
Ninja Forms - Excel Export <= 3.3.6 - Authenticated (Subscriber+) Stored Cross-Site Scripting via 'filter' Parameter
CVE-2026-15161
6.4 Medium
-
saturdaydrive ninja forms - excel export
Ninja Forms - Excel Export <= 3.3.6 - Missing Authorization to Authenticated (Subscriber+) XLS Write via Path Traversal
CVE-2026-15160
4.3 Medium
-
saturdaydrive ninja forms - excel export
Ninja Forms - Excel Export <= 3.3.6 - Insecure Direct Object Reference to Authenticated (Subscriber+) Sensitive Data Disclosure via 'spreadsheet_export_form_id' Parameter
CVE-2026-15159
4.3 Medium
-
saturdaydrive ninja forms - file uploads
Ninja Forms - File Uploads <= 3.3.29 - Missing Authorization to Unauthenticated Log Disclosure and Deletion via debug-log/delete-all and debug-log/get-all REST Endpoints
CVE-2026-12557
5.3 Medium
-
saturdaydrive ninja forms - file uploads
Ninja Forms - File Uploads <= 3.3.29 - Unauthenticated Arbitrary File Read via File Upload Field 'files[].data.file_path' Parameter
CVE-2026-13369
7.5 High
-
saturdaydrive ninja forms - file uploads
Ninja Forms - File Upload <= 3.3.26 - Unauthenticated Arbitrary File Upload
CVE-2026-0740
Public exploit
EPSS 62.9%
9.8 Critical
-
ninjaforms ninja forms file uploads, saturday drive ninja forms, saturdaydrive ninja forms - file uploads +2 more
Ninja Forms File Uploads <= 3.3.16 - Unauthenticated Stored Cross-Site Scripting via File Upload
CVE-2024-1596
7.2 High
-
saturdaydrive ninja forms - file uploads, ninjaforms ninja forms file uploads +1 more
Ninja Forms - File Uploads Extension <= 3.3.0 - Arbitrary File Upload
CVE-2022-0888
EPSS 39.4%
9.8 Critical
-
saturdaydrive ninja forms - file uploads, ninjaforms ninja forms file uploads +1 more
Ninja Forms - File Uploads Extension <= 3.3.12 - Reflected Cross-Site Scripting
CVE-2022-0889
7.2 High