CVE-2026-57784

The Ninja Forms File Uploads Extension versions up to 3.3.26 are vulnerable to unauthenticated Cross-Site Request Forgery (CSRF). An attacker can trick an administrator into performing unwanted actions.

Possibility of performing unauthorized operations in the administrator context, e.g., uploading malicious files.

Update the Ninja Forms File Uploads Extension to the latest version.