NF
Product
Ninja Forms - File Uploads
7
CVEs
0
On KEV
9.8
Max CVSS
1
New 30D
Severity mix
Critical 2High 2Medium 3Low 0
Watch
Add Ninja Forms - File Uploads to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2024-1596 | 6.1 | Sep 7 | Ninja Forms File Uploads <= 3.3.16 - Unauthenticated Stored Cross-Site Scripting via File Upload Affected: through 3.3.16 |
| CVE-2022-0889 | 6.1 | Mar 23 | Ninja Forms - File Uploads Extension <= 3.3.12 - Reflected Cross-Site Scripting Affected: through 3.3.12 |
| CVE-2026-12557 | 5.3 | Jul 3 | Ninja Forms - File Uploads <= 3.3.29 - Missing Authorization to Unauthenticated Log Disclosure and Deletion via debug-log/delete-all and debug-log/get-all REST Endpoints Affected: through 3.3.29 |
Showing 3