What’s Vulnerable › Products

SaturdayDrive Ninja Forms - File Uploads vulnerabilities

8 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 4 published in the last 12 months.

Check whether your SaturdayDrive Ninja Forms - File Uploads version is affected

Latest SaturdayDrive Ninja Forms - File Uploads vulnerabilities

• CVE-2026-92820 — Ninja Forms - File Uploads <= 3.3.34 - Unauthenticated Arbitrary File Upload (CVSS 8.1)
• CVE-2026-12557 — Ninja Forms - File Uploads <= 3.3.29 - Missing Authorization to Unauthenticated Log Disclosure and Deletion via debug-log/delete-all and debug-log/get-all REST Endpoints (CVSS 5.3)
• CVE-2026-13369 — Ninja Forms - File Uploads <= 3.3.29 - Unauthenticated Arbitrary File Read via File Upload Field 'files[].data.file_path' Parameter (CVSS 7.5)
• CVE-2026-0740 — Ninja Forms - File Upload <= 3.3.26 - Unauthenticated Arbitrary File Upload (CVSS 9.8)
• CVE-2024-1596 — Ninja Forms File Uploads <= 3.3.16 - Unauthenticated Stored Cross-Site Scripting via File Upload (CVSS 6.1)
• CVE-2022-0889 — Ninja Forms - File Uploads Extension <= 3.3.12 - Reflected Cross-Site Scripting (CVSS 6.1)
• CVE-2022-0888 — Ninja Forms - File Uploads Extension <= 3.3.0 - Arbitrary File Upload (CVSS 9.8)
• CVE-2019-10869 — (CVSS 8.1)