Saturdaydrive Ninja Forms File Uploads vulnerabilities

CVE-2026-0740 [CRITICAL] CWE-434 CVE-2026-0740: The Ninja Forms - File Uploads plugin for WordPress is vulnerable to arbitrary file uploads due to m The Ninja Forms - File Uploads plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the 'NF_FU_AJAX_Controllers_Uploads::handle_upload' function in all versions up to, and including, 3.3.26. This makes it possible for unauthenticated attackers to upload arbitrary files on the affected site's server whic

CVE-2022-0888 [CRITICAL] CWE-434 CVE-2022-0888: The Ninja Forms - File Uploads Extension WordPress plugin is vulnerable to arbitrary file uploads du The Ninja Forms - File Uploads Extension WordPress plugin is vulnerable to arbitrary file uploads due to insufficient input file type validation found in the ~/includes/ajax/controllers/uploads.php file which can be bypassed making it possible for unauthenticated attackers to upload malicious files that can be used to obtain remote code execution, i

CVE-2026-92820 [HIGH] CWE-434 CVE-2026-92820: The Ninja Forms - File Uploads plugin for WordPress is vulnerable to arbitrary file operations in al The Ninja Forms - File Uploads plugin for WordPress is vulnerable to arbitrary file operations in all versions up to, and including, 3.3.34 via the external (Amazon S3) upload flow. The plugin trusts an attacker-supplied file path from the form submission and stores it as the upload's file_path, which is then used without validation to attach a file t

CVE-2026-13369 [HIGH] CWE-22 CVE-2026-13369: The Ninja Forms - File Uploads plugin for WordPress is vulnerable to Arbitrary File Read via the att The Ninja Forms - File Uploads plugin for WordPress is vulnerable to Arbitrary File Read via the attach_files() function in versions up to, and including, 3.3.29. This is due to the get_files_for_attachment() function accepting a raw attacker-controlled 'files' array when the process() method returns early due to a client-supplied saveProgress flag, by

CVE-2026-12557 [MEDIUM] CWE-862 CVE-2026-12557: The Ninja Forms - File Uploads plugin for WordPress is vulnerable to authorization bypass in all ver The Ninja Forms - File Uploads plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 3.3.29. This is due to the plugin not properly verifying that a user is authorized to perform an action. This makes it possible for unauthenticated attackers to read all plugin debug log entries stored in the wp_nf3_log tab

CVE-2022-0889 [MEDIUM] CWE-79 CVE-2022-0889: The Ninja Forms - File Uploads Extension WordPress plugin is vulnerable to reflected cross-site scri The Ninja Forms - File Uploads Extension WordPress plugin is vulnerable to reflected cross-site scripting due to missing sanitization of the files filename parameter found in the ~/includes/ajax/controllers/uploads.php file which can be used by unauthenticated attackers to add malicious web scripts to vulnerable WordPress sites, in versions up to and i

CVE-2024-1596 [MEDIUM] CWE-79 CVE-2024-1596: The Ninja Forms - File Uploads plugin for WordPress is vulnerable to Stored Cross-Site Scripting via The Ninja Forms - File Uploads plugin for WordPress is vulnerable to Stored Cross-Site Scripting via an uploaded file (e.g. RTX file) in all versions up to, and including, 3.3.16 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that will execute whe