https://db.gcve.eu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Mon, 28 Sep 2026 19:46:04 +0000 https://db.gcve.eu/vuln/cve-2026-0740 <p><strong>Affected:</strong> SaturdayDrive Ninja Forms - File Uploads</p> <p>The Ninja Forms - File Uploads plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the &#39;NF_FU_AJAX_Controllers_Uploads::handle_upload&#39; function in all versions up to, and including, 3.3.26. This makes it possible for unauthenticated attackers to upload arbitrary files on the affected site&#39;s server which may make remote code execution possible. Note: The vulnerability was partially patched in version 3.3.25 and fully patched in version 3.3.27.</p> <p><strong>Affected:</strong> SaturdayDrive Ninja Forms - File Uploads</p> <p>The Ninja Forms - File Uploads plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the &#39;NF_FU_AJAX_Controllers_Uploads::handle_upload&#39; function in all versions up to, and including, 3.3.26. This makes it possible for unauthenticated attackers to upload arbitrary files on the affected site&#39;s server which may make remote code execution possible. Note: The vulnerability was partially patched in version 3.3.25 and fully patched in version 3.3.27.</p> https://db.gcve.eu/vuln/cve-2026-0740