Description
Unauthenticated Cross Site Request Forgery (CSRF) in Ninja Forms File Uploads Extension <= 3.3.26 versions.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Ninja Forms | Ninja Forms File Uploads Extension | ≤ 3.3.26 | — |
Critical · 9.6
CVE-2026-57784
EUVD-2026-48181GHSA-vqq2-95gx-pw9q
WordPress Ninja Forms File Uploads Extension plugin <= 3.3.26 - Cross Site Request Forgery (CSRF) vulnerability
Published Jul 23, 2026 · Updated Jul 23, 2026 · Assigned by Patchstack