SD
Vendor
Saturday Drive
20
CVEs
0
On KEV
1
New 30D
Products
NF9.8
Ninja Forms
Saturday Drive
15 CVEs0 on KEV1 new
NF7.2
Ninja Forms Contact Form
Saturday Drive
1 CVEs0 on KEV0 new
NF7.1
Ninja Forms File Uploads Extension
Saturday Drive
1 CVEs0 on KEV0 new
NF8.8
Ninja Forms - Layout & Styles
Saturday Drive
1 CVEs0 on KEV0 new
NF4.3
Ninja Forms - Save Progress
Saturday Drive
1 CVEs0 on KEV0 new
NF6.4
Ninja Forms - Scheduled Exports
Saturday Drive
1 CVEs0 on KEV0 new
Recent CVEs
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2026-67187 New | NF Ninja Forms Saturday Drive | 7.1 | Oct 28 | Ninja Forms WordPress Plugin < 3.15.4 Server-Side Validation Bypass via List Fields |
| CVE-2026-87870 | NF Ninja Forms - Scheduled Exports Saturday Drive | 6.4 | Sep 10 | Ninja Forms - Scheduled Exports <= 3.0.3 - Authenticated (Subscriber+) Stored Cross-Site Scripting via REST API Parameters |
| CVE-2026-15550 | NF Ninja Forms - Save Progress Saturday Drive | 4.3 | Sep 5 | Ninja Forms - Save Progress <= 3.0.30 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Data Deletion via admin-ajax.php with admin_init Hook |
| CVE-2026-81773 | NF Ninja Forms File Uploads Extension Saturday Drive | 7.1 | Sep 3 | WordPress Ninja Forms File Uploads Extension plugin <= 3.3.26 - Cross Site Scripting (XSS) vulnerability |
| CVE-2026-81772 | NF Ninja Forms - Layout & Styles Saturday Drive | 8.8 | Sep 2 | WordPress Ninja Forms - Layout & Styles plugin <= 3.0.31 - PHP Object Injection vulnerability |
| CVE-2026-65052 | NF Ninja Forms Saturday Drive | 7.5 | Jul 21 | Ninja Forms Calculation and Payment Total Tampering via Fail-Open get_calc_value in ListSelect and ListRadio Fields |
| CVE-2026-65051 | NF Ninja Forms Saturday Drive | 6.5 | Jul 21 | Ninja Forms Server-Side Validation Bypass via Client-Controlled Field Metadata Merge in AJAX Submission Handler |
| CVE-2026-65050 | NF Ninja Forms Saturday Drive | 6.5 | Jul 21 | Ninja Forms Missing Authorization in submissions-table Gutenberg Block Discloses Form Submissions to Unauthenticated Visitors |
| CVE-2026-65049 | NF Ninja Forms Saturday Drive | 9.3 | Jul 21 | Ninja Forms Cross-Site Network-Wide Data Deletion on WordPress Multisite via nf_delete_all_data AJAX Action |
| CVE-2026-65048 | NF Ninja Forms Saturday Drive | 9.3 | Jul 21 | Ninja Forms Unauthenticated Stored Cross-Site Scripting via Repeatable Fieldset Submission Index |
| CVE-2024-43999 | NF Ninja Forms Saturday Drive | 4.8 | Sep 17 | WordPress Ninja Forms plugin <= 3.8.11 - Cross Site Scripting (XSS) vulnerability |
| CVE-2024-1596 | NF Ninja Forms Saturday Drive | 6.1 | Sep 7 | Ninja Forms File Uploads <= 3.3.16 - Unauthenticated Stored Cross-Site Scripting via File Upload |
| CVE-2024-39628 | NF Ninja Forms Saturday Drive | 8.8 | Aug 26 | WordPress Ninja Forms plugin <= 3.8.6 - Cross Site Request Forgery (CSRF) vulnerability |
| CVE-2024-37934 | NF Ninja Forms Saturday Drive | 9.8 | Jul 9 | WordPress Ninja Forms plugin <= 3.8.4 - Subscriber+ Arbitrary Shortcode Execution vulnerability |
| CVE-2023-38393 | NF Ninja Forms Saturday Drive | 8.8 | Jun 19 | WordPress Ninja Forms plugin <= 3.6.25 - Subscriber+ Broken Access Control vulnerability |
| CVE-2023-38386 | NF Ninja Forms Saturday Drive | 9.8 | Jun 19 | WordPress Ninja Forms plugin <= 3.6.25 - Contributor+ Broken Access Control vulnerability |
| CVE-2023-36505 | NF Ninja Forms Contact Form Saturday Drive | 7.2 | Apr 17 | WordPress Ninja Forms Plugin <= 3.6.24 is vulnerable to Arbitrary File Deletion |
| CVE-2024-25572 | NF Ninja Forms Saturday Drive | 8.8 | Apr 11 | Cross-site request forgery (CSRF) vulnerability exists in Ninja Forms prior to 3.4.31 |
| CVE-2024-26019 | NF Ninja Forms Saturday Drive | 5.4 | Apr 11 | Ninja Forms prior to 3.8.1 contains a cross-site scripting vulnerability in submit processing |
| CVE-2024-29220 | NF Ninja Forms Saturday Drive | 6.1 | Apr 11 | Ninja Forms prior to 3.8.1 contains a cross-site scripting vulnerability in custom fields for labels |