CVE-2026-92820 | SaturdayDrive Ninja Forms Plugin up to 3.3.34 on WordPress External File Upload file_path path traversal (EUVD-2026-91175)

October 2, 2026 Yanac

A vulnerability categorized as critical has been discovered in SaturdayDrive Ninja Forms Plugin up to 3.3.34 on WordPress. This impacts an unknown function of the component External File Upload. The manipulation of the argument file_path results in path traversal.

This vulnerability was named CVE-2026-92820. The attack may be performed from remote. There is no available exploit.VulDB Recent EntriesRead More