Skip to content
CVE Ledger
  • Newest CVEsPage
  • Recently added to KEVPage
  • Rising exploitation (EPSS)Page
  • Weekly digestPage
  • StatisticsPage
  • WatchlistPage
  • API docsPage
  • MCP serverPage
  • AboutPage
  • Data sourcesPage
  • Data statusPage
  • ChangelogPage
  • How it's builtPage
  • Support the projectPage

14 results

SaturdayDrive vulnerabilities

11 published CVEs name SaturdayDrive among the affected products.

Atom feed of new CVEs

Newest CVEs

  • CVE-2026-126537

    Ninja Forms - File Uploads <= 3.3.36 - Unauthenticated Arbitrary File Deletion via 'files[].data.file_path' Parameter via 'extra.saveProgress'

    SaturdayDrive · Ninja Forms - File Uploads

    Critical9.1
  • CVE-2026-92820

    Ninja Forms - File Uploads <= 3.3.34 - Unauthenticated Arbitrary File Upload

    SaturdayDrive · Ninja Forms - File Uploads

    High8.1
  • CVE-2026-15161

    Ninja Forms - Excel Export <= 3.3.6 - Authenticated (Subscriber+) Stored Cross-Site Scripting via 'filter' Parameter

    SaturdayDrive · Ninja Forms - Excel Export

    Medium6.4
  • CVE-2026-15159

    Ninja Forms - Excel Export <= 3.3.6 - Insecure Direct Object Reference to Authenticated (Subscriber+) Sensitive Data Disclosure via 'spreadsheet_export_form_id' Parameter

    SaturdayDrive · Ninja Forms - Excel Export

    Medium4.3
  • CVE-2026-15160

    Ninja Forms - Excel Export <= 3.3.6 - Missing Authorization to Authenticated (Subscriber+) XLS Write via Path Traversal

    SaturdayDrive · Ninja Forms - Excel Export

    Medium4.3
  • CVE-2026-12557

    Ninja Forms - File Uploads <= 3.3.29 - Missing Authorization to Unauthenticated Log Disclosure and Deletion via debug-log/delete-all and debug-log/get-all REST Endpoints

    SaturdayDrive · Ninja Forms - File Uploads

    Medium5.3
  • CVE-2026-13369

    Ninja Forms - File Uploads <= 3.3.29 - Unauthenticated Arbitrary File Read via File Upload Field 'files[].data.file_path' Parameter

    SaturdayDrive · Ninja Forms - File Uploads

    High7.5
  • CVE-2026-0740

    Ninja Forms - File Upload <= 3.3.26 - Unauthenticated Arbitrary File Upload

    SaturdayDrive · Ninja Forms - File Uploads

    Critical9.8
  • CVE-2024-1596

    Ninja Forms File Uploads <= 3.3.16 - Unauthenticated Stored Cross-Site Scripting via File Upload

    SaturdayDrive · Ninja Forms - File Uploads

    High7.2
  • CVE-2022-0888

    Ninja Forms - File Uploads Extension <= 3.3.0 - Arbitrary File Upload

    SaturdayDrive · Ninja Forms - File Uploads

    Critical9.8
All 11 in the list