CVE-2026-15160 | SaturdayDrive Ninja Forms Plugin up to 3.3.6 on WordPress Excel Export spreadsheet_export_tmp_name path traversal

July 17, 2026 Yanac

A vulnerability classified as critical has been found in SaturdayDrive Ninja Forms Plugin up to 3.3.6 on WordPress. This issue affects some unknown processing of the component Excel Export. This manipulation of the argument spreadsheet_export_tmp_name causes path traversal.

This vulnerability is registered as CVE-2026-15160. Remote exploitation of the attack is possible. No exploit is available.VulDB Recent EntriesRead More