Skip to content
Noroxi

Ninja Forms - File Uploads

ninja-forms-uploads · plugin

Known security vulnerabilities for Ninja Forms - File Uploads. Find out in seconds which version runs on your site with WP Lens.

4 known vulnerabilities

1 critical · latest Sep 3, 2026

Vulnerabilities

  • CVE-2026-57784

    WordPress Ninja Forms File Uploads Extension plugin <= 3.3.26 - Cross Site Request Forgery (CSRF) vulnerability

    Critical 9.6

  • CVE-2026-13369

    Ninja Forms - File Uploads <= 3.3.29 - Unauthenticated Arbitrary File Read via File Upload Field 'files[].data.file_path' Parameter

    High 7.5

  • CVE-2026-81773

    WordPress Ninja Forms File Uploads Extension plugin <= 3.3.26 - Cross Site Scripting (XSS) vulnerability

    High 7.1

  • CVE-2026-12557

    Ninja Forms - File Uploads <= 3.3.29 - Missing Authorization to Unauthenticated Log Disclosure and Deletion via debug-log/delete-all and debug-log/get-all REST

    Medium 5.3

← Back to directory