CVE-2026-126537

Vendor

SaturdayDrive

Product

Ninja Forms - File Uploads

CVSS v3.1

9.1 AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H

Weakness

CWE-22

Exposure class

Collaboration, Web platform

Every item in the archive that references this CVE, highest rank first. Headlines open the publisher.

1. 44
   CVE NVD 4h ago

   The Ninja Forms - File Uploads add-on for WordPress is vulnerable to Arbitrary File Deletion (and arbitrary file read via S3/Dropbox/Google Drive…

   The Ninja Forms - File Uploads add-on for WordPress is vulnerable to Arbitrary File Deletion (and arbitrary file read via S3/Dropbox/Google Drive exfiltration) in versions up to, and including, 3.3.36. The flaw spans…

   CVSS 9.1 CVE-2026-126537 SaturdayDrive