N/A
2026-04-07< 3.3.27
WordPress Ninja Forms File Uploads Extension Plugin <= 3.3.26 is vulnerable to a high priority Arbitrary File Upload
Minimum safe version
3.3.27
Update to 3.3.27 or later to address 5 fixable vulnerabilities
WordPress Ninja Forms File Uploads Extension Plugin <= 3.3.26 is vulnerable to a high priority Arbitrary File Upload
WordPress Ninja Forms File Uploads Extension Plugin <= 3.3.16 is vulnerable to Cross Site Scripting (XSS)
CVE-2022-0888
CVE-2022-0889
CVE-2019-10869