CVE-2026-81773: Saturday Drive Ninja Forms File Uploads Extension

High severity, CVSS 7.1. EPSS: 0.3% chance of exploitation in the next 30 days.

Unauthenticated Cross Site Scripting (XSS) in Ninja Forms File Uploads Extension <= 3.3.26 versions.

Affected products

• Saturday Drive Ninja Forms File Uploads Extension: up to and including 3.3.26

Published 2026-09-03. Last modified 2026-09-05.