ninja_forms_-_file_uploads vulnerabilities

CVEs whose affected-version data names the ninja_forms_-_file_uploads package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.

1 CVERSS

CVE-2026-92820High· 8.1

yesterday

The Ninja Forms - File Uploads plugin for WordPress is vulnerable to arbitrary file operations in all versions up to, and including, 3.3.34 via the external (Amazon S3) upload flow

The Ninja Forms - File Uploads plugin for WordPress is vulnerable to arbitrary file operations in all versions up to, and including, 3.3.34 via the external (Amazon S3) upload flow. The plugin trusts an attacker-supplied file path from t…

▾ TwilightSaturdayDrive · Ninja Forms - File UploadsEPSS 0.52%via NVD