Skip to contentSaturdaydrive Ninja Forms - File Uploads vulnerabilities
- saturdaydrive ninja forms - file uploadsNinja Forms - File Uploads <= 3.3.36 - Unauthenticated Arbitrary File Deletion via 'files[].data.file_path' Parameter via 'extra.saveProgress'CVE-2026-126537Public exploit9.1 Critical
- saturdaydrive ninja forms - file uploadsNinja Forms - File Uploads <= 3.3.34 - Unauthenticated Arbitrary File UploadCVE-2026-928208.1 High
- saturdaydrive ninja forms - file uploadsNinja Forms - File Uploads <= 3.3.29 - Missing Authorization to Unauthenticated Log Disclosure and Deletion via debug-log/delete-all and debug-log/get-all REST EndpointsCVE-2026-125575.3 Medium
- saturdaydrive ninja forms - file uploadsNinja Forms - File Uploads <= 3.3.29 - Unauthenticated Arbitrary File Read via File Upload Field 'files[].data.file_path' ParameterCVE-2026-133697.5 High
- saturdaydrive ninja forms - file uploadsNinja Forms - File Upload <= 3.3.26 - Unauthenticated Arbitrary File UploadCVE-2026-0740Public exploitEPSS 62.9%9.8 Critical
- ninjaforms ninja forms file uploads, saturday drive ninja forms, saturdaydrive ninja forms - file uploads +2 moreNinja Forms File Uploads <= 3.3.16 - Unauthenticated Stored Cross-Site Scripting via File UploadCVE-2024-15967.2 High
- saturdaydrive ninja forms - file uploads, ninjaforms ninja forms file uploads +1 moreNinja Forms - File Uploads Extension <= 3.3.0 - Arbitrary File UploadCVE-2022-0888EPSS 39.4%9.8 Critical
- saturdaydrive ninja forms - file uploads, ninjaforms ninja forms file uploads +1 moreNinja Forms - File Uploads Extension <= 3.3.12 - Reflected Cross-Site ScriptingCVE-2022-08897.2 High