ninja-forms-uploads

WordPress · Plugin

10 reports

Vulnerability alerts

Report	Product	Ecosystem	Severity	Fix status	Last updated
Ninja Forms - File Uploads <= 3.3.34 - Unauthenticated Arbitrary File UploadCVE-2026-92820	ninja-forms-uploads	WordPress	High	Fix reported	2026-10-02
Ninja Forms - File Uploads <= 3.3.26 - Unauthenticated Stored Cross-Site ScriptingCVE-2026-81773	ninja-forms-uploads	WordPress	High	No fix reported	2026-09-09
Ninja Forms File Uploads Extension <= 3.3.26 - Cross-Site Request ForgeryCVE-2026-57784	ninja-forms-uploads	WordPress	Medium	No fix reported	2026-08-17
Ninja Forms - File Uploads <= 3.3.29 - Missing Authorization to Unauthenticated Log Disclosure and Deletion via debug-log/delete-all and debug-log/get-all REST EndpointsCVE-2026-12557	ninja-forms-uploads	WordPress	Medium	Fix reported	2026-07-03
Ninja Forms - File Uploads <= 3.3.29 - Unauthenticated Arbitrary File Read via File Upload Field 'files[].data.file_path' ParameterCVE-2026-13369	ninja-forms-uploads	WordPress	High	Fix reported	2026-07-02
Ninja Forms - File Upload <= 3.3.26 - Unauthenticated Arbitrary File UploadCVE-2026-0740	ninja-forms-uploads	WordPress	Critical	Fix reported	2026-04-07
Ninja Forms File Uploads <= 3.3.16 - Unauthenticated Stored Cross-Site Scripting via File UploadCVE-2024-1596	ninja-forms-uploads	WordPress	High	Fix reported	2024-09-07
Ninja Forms - File Uploads Extension <= 3.3.0 - Arbitrary File UploadCVE-2022-0888	ninja-forms-uploads	WordPress	Critical	Fix reported	2024-01-22
Ninja Forms - File Uploads Extension <= 3.3.12 - Reflected Cross-Site ScriptingCVE-2022-0889	ninja-forms-uploads	WordPress	High	Fix reported	2024-01-22
Ninja Forms - File Uploads <= 3.0.22 - Unauthenticated Arbitrary File UploadCVE-2019-10869	ninja-forms-uploads	WordPress	High	Fix reported	2024-01-22