Hackers exploit critical flaw in Ninja Forms WordPress plugin
Over Security - Cybersecurity news aggregator [Unofficial]
April 7, 2026
A critical vulnerability in the Ninja Forms File Uploads premium add-on for WordPress allows uploading arbitrary files without authentication, which can lead to remote code execution.
Discussion in the ATmosphere