CVE-2026-57784

The Ninja Forms File Uploads Extension versions up to 3.3.26 are vulnerable to an unauthenticated Cross Site Request Forgery (CSRF) attack, allowing attackers to exploit the file upload functionality without user authentication. This critical vulnerability could lead to unauthorized file uploads, potentially compromising the integrity and security of the affected applications. Organizations using this extension should prioritize immediate patching or mitigation efforts to safeguard against potential exploitation.