Skip to content
OpenAdvisories

Vendor

Saturday Drive

35 known vulnerabilities.

Products

Ninja Forms 16 Ninja Forms - File Uploads 8 Ninja Forms - Excel Export 3 Ninja Forms Contact Form 2 Ninja Forms - Scheduled Exports 1 Ninja Forms Contact Form – The Drag and Drop Form Builder for WordPress 1 Ninja Forms - Layout & Styles 1 Ninja Forms Contact Form (WordPress plugin) 1 Ninja Forms File Uploads Extension 1 Ninja Forms - Save Progress 1
All Critical High Medium Low Exploited only Public exploit

3 results · Clear filters · Feed

  • Critical 9.1
    CVE-2026-126537 Public exploit

    Ninja Forms - File Uploads <= 3.3.36 - Unauthenticated Arbitrary File Deletion via 'files[].data.file_path' Parameter via 'extra.saveProgress'

    The Ninja Forms - File Uploads add-on for WordPress is vulnerable to Arbitrary File Deletion (and arbitrary file read via S3/Dropbox/Google Drive exfiltration) in versions up to, and including, 3.3.36. The flaw spans NF_FU_Fields_Upload::process() in includes…

    Saturday Drive Ninja Forms - File Uploads
  • Critical 9.8
    CVE-2026-0740 Public exploit Scanner template EPSS 63%

    Ninja Forms - File Upload <= 3.3.26 - Unauthenticated Arbitrary File Upload

    The Ninja Forms - File Uploads plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the 'NF_FU_AJAX_Controllers_Uploads::handle_upload' function in all versions up to, and including, 3.3.26. This makes it possibl…

    Saturday Drive Ninja Forms - File Uploads Web / CMS
  • High 7.1
    CVE-2023-37979 Public exploit Scanner template

    WordPress Ninja Forms Plugin <= 3.6.25 is vulnerable to Cross Site Scripting (XSS)

    Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in Saturday Drive Ninja Forms Contact Form plugin <= 3.6.25 versions.

    Saturday Drive Ninja Forms Contact Form