Security Advisory

CVE-2026-12557

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2026-07-03 04:30:16

Last updated 2026-07-06 16:32:44

Assigner Wordfence

CVSS score 5.3

State PUBLISHED

Description

The Ninja Forms - File Uploads plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 3.3.29. This is due to the plugin not properly verifying that a user is authorized to perform an action. This makes it possible for unauthenticated attackers to read all plugin debug log entries stored in the wp_nf3_log table or permanently delete all rows from that table.

← Browse all CVEs View on cve.org ↗