Saturday Drive vulnerabilities

CVEs per yearBy the year they were published

1. 20212
2. 20221
3. 20232
4. 20249
5. 202610

Newest CVEs

• CVE-2026-67187

  Ninja Forms WordPress Plugin < 3.15.4 Server-Side Validation Bypass via List Fields

  Saturday Drive · Ninja Forms

  Medium5.1
• CVE-2026-87870

  Ninja Forms - Scheduled Exports <= 3.0.3 - Authenticated (Subscriber+) Stored Cross-Site Scripting via REST API Parameters

  Saturday Drive · Ninja Forms - Scheduled Exports

  Medium6.4
• CVE-2026-15550

  Ninja Forms - Save Progress <= 3.0.30 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Data Deletion via admin-ajax.php with admin_init Hook

  Saturday Drive · Ninja Forms - Save Progress

  Medium4.3
• CVE-2026-81773

  WordPress Ninja Forms File Uploads Extension plugin <= 3.3.26 - Cross Site Scripting (XSS) vulnerability

  Saturday Drive · Ninja Forms File Uploads Extension

  High7.1
• CVE-2026-81772

  WordPress Ninja Forms - Layout & Styles plugin <= 3.0.31 - PHP Object Injection vulnerability

  Saturday Drive · Ninja Forms - Layout & Styles

  High8.8
• CVE-2026-65052

  Ninja Forms Calculation and Payment Total Tampering via Fail-Open get_calc_value in ListSelect and ListRadio Fields

  Saturday Drive · Ninja Forms

  High8.7
• CVE-2026-65051

  Ninja Forms Server-Side Validation Bypass via Client-Controlled Field Metadata Merge in AJAX Submission Handler

  Saturday Drive · Ninja Forms

  Medium6.9
• CVE-2026-65050

  Ninja Forms Missing Authorization in submissions-table Gutenberg Block Discloses Form Submissions to Unauthenticated Visitors

  Saturday Drive · Ninja Forms

  High7.1
• CVE-2026-65049

  Ninja Forms Cross-Site Network-Wide Data Deletion on WordPress Multisite via nf_delete_all_data AJAX Action

  Saturday Drive · Ninja Forms

  High8.4
• CVE-2026-65048

  Ninja Forms Unauthenticated Stored Cross-Site Scripting via Repeatable Fieldset Submission Index

  Saturday Drive · Ninja Forms

  Critical9.3