CVE Catalog
CVE-2026-57784
CriticalCVSS 9.6Exploitation Probability (EPSS)
Low risk0.20%
9th percentile - higher than 9% of all known CVEs
Summary
The Ninja Forms File Uploads Extension versions up to 3.3.26 are vulnerable to unauthenticated Cross-Site Request Forgery (CSRF). An attacker can trick an administrator into performing unwanted actions.
Risk Assessment
Possibility of performing unauthorized operations in the administrator context, e.g., uploading malicious files.
Recommendation
Update the Ninja Forms File Uploads Extension to the latest version.
Other vulnerabilities in Ninja Forms File Uploads Extension
Original NVD description (English source)
Unauthenticated Cross Site Request Forgery (CSRF) in Ninja Forms File Uploads Extension <= 3.3.26 versions.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS