CVE-2026-57784: Ninja Forms File Uploads Extension

Critical severity, CVSS 9.6. EPSS: 0.2% chance of exploitation in the next 30 days.

Unauthenticated Cross Site Request Forgery (CSRF) in Ninja Forms File Uploads Extension <= 3.3.26 versions.

Affected products

• Ninja Forms Ninja Forms File Uploads Extension: up to and including 3.3.26

Published 2026-07-23. Last modified 2026-07-23.