Saturday Drive vulnerabilities
We track 8 vulnerabilities in Saturday Drive products across 2 products. 8 are rated high or critical, and none are known to be exploited. The most recent was published on October 28, 2026.
Latest Saturday Drive vulnerabilities
- 7.1 High severity
Ninja Forms: Improper Neutralization of Formula Elements in a CSV File
Ninja Forms plugin for WordPress before 3.15.4 contains an incomplete server-side validation vulnerability that allows unauthenticated attackers to submit arbitrary values to Checkbox List, Multi-Select List, Image List, Country, and State fields because NF_Ab
- 7.5 High severity
Ninja Forms: External Control of Assumed-Immutable Web Parameter
Ninja Forms WordPress plugin version 3.14.8 and prior contains an improper input validation vulnerability that allows unauthenticated attackers to inject arbitrary numeric values into form calculations and payment totals by submitting values that do not match
- 9.3 Critical severity
Ninja Forms: Incorrect Authorization
Ninja Forms plugin version 3.14.8 and prior for WordPress Multisite contains an incorrect authorization vulnerability that allows a subsite Administrator to trigger network-wide deletion of all Ninja Forms data by exploiting a site-scoped capability check comb
- 9.3 Critical severity
Ninja Forms: Improper Neutralization of Input During Web Page Generation
Ninja Forms plugin for WordPress versions 3.10.4 through 3.14.9 contains an unauthenticated stored cross-site scripting vulnerability in the Repeatable Fieldset feature where parseSubmissionIndex() accepts arbitrary strings as submission indexes without numeri
- 8.8 High severity
Ninja Forms: Cross-Site Request Forgery
Cross-Site Request Forgery (CSRF) vulnerability in Saturday Drive Ninja Forms allows Cross Site Request Forgery.This issue affects Ninja Forms: from n/a through 3.8.6.
- 9.8 Critical severity
Ninja Forms: Improper Control of Generation of Code
Improper Control of Generation of Code ('Code Injection') vulnerability in Saturday Drive Ninja Forms allows Code Injection.This issue affects Ninja Forms: from n/a through 3.8.4.
- 7.2 High severity
Improper Input Validation vulnerability in Saturday Drive Ninja Forms Contact Form.This issue…
Improper Input Validation vulnerability in Saturday Drive Ninja Forms Contact Form.This issue affects Ninja Forms Contact Form : from n/a through 3.6.24.
- 8.8 High severity
Ninja Forms: Cross-Site Request Forgery
Cross-site request forgery (CSRF) vulnerability exists in Ninja Forms prior to 3.4.31. If a website administrator views a malicious page while logging in, unintended operations may be performed.