SaturdayDrive vulnerabilities

CVEs per yearBy the year they were published

1. 20222
2. 20241
3. 20267

Newest CVEs

• CVE-2026-92820

  Ninja Forms - File Uploads <= 3.3.34 - Unauthenticated Arbitrary File Upload

  SaturdayDrive · Ninja Forms - File Uploads

  High8.1
• CVE-2026-15161

  Ninja Forms - Excel Export <= 3.3.6 - Authenticated (Subscriber+) Stored Cross-Site Scripting via 'filter' Parameter

  SaturdayDrive · Ninja Forms - Excel Export

  Medium6.4
• CVE-2026-15159

  Ninja Forms - Excel Export <= 3.3.6 - Insecure Direct Object Reference to Authenticated (Subscriber+) Sensitive Data Disclosure via 'spreadsheet_export_form_id' Parameter

  SaturdayDrive · Ninja Forms - Excel Export

  Medium4.3
• CVE-2026-15160

  Ninja Forms - Excel Export <= 3.3.6 - Missing Authorization to Authenticated (Subscriber+) XLS Write via Path Traversal

  SaturdayDrive · Ninja Forms - Excel Export

  Medium4.3
• CVE-2026-12557

  Ninja Forms - File Uploads <= 3.3.29 - Missing Authorization to Unauthenticated Log Disclosure and Deletion via debug-log/delete-all and debug-log/get-all REST Endpoints

  SaturdayDrive · Ninja Forms - File Uploads

  Medium5.3
• CVE-2026-13369

  Ninja Forms - File Uploads <= 3.3.29 - Unauthenticated Arbitrary File Read via File Upload Field 'files[].data.file_path' Parameter

  SaturdayDrive · Ninja Forms - File Uploads

  High7.5
• CVE-2026-0740

  Ninja Forms - File Upload <= 3.3.26 - Unauthenticated Arbitrary File Upload

  SaturdayDrive · Ninja Forms - File Uploads

  Critical9.8
• CVE-2024-1596

  Ninja Forms File Uploads <= 3.3.16 - Unauthenticated Stored Cross-Site Scripting via File Upload

  SaturdayDrive · Ninja Forms - File Uploads

  High7.2
• CVE-2022-0888

  Ninja Forms - File Uploads Extension <= 3.3.0 - Arbitrary File Upload

  SaturdayDrive · Ninja Forms - File Uploads

  Critical9.8
• CVE-2022-0889

  Ninja Forms - File Uploads Extension <= 3.3.12 - Reflected Cross-Site Scripting

  SaturdayDrive · Ninja Forms - File Uploads

  High7.2