CRITICALVulnerability
Global

Critical Vulnerability in Ninja Forms Exposes WordPress Sites

·Source: Infosecurity Magazine

Updated:

Executive Summary

Ninja Forms File Upload RCE via unauthenticated arbitrary file upload; update to 3.3.27 immediately

Analysis

Ninja Forms File Upload RCE via unauthenticated arbitrary file upload; update to 3.3.27 immediately
Source Attribution

Originally published by Infosecurity Magazine on Apr 8, 2026.

Related Threats

MEDIUMVulnerabilityNEW

Neon Commerce raises $13m to scale direct-to-consumer commerce for Game publishers

Neon Commerce, Inc., a fintech startup specializing in direct-to-consumer (DTC) commerce for games, has closed a $13 million Series A to expand its commerce and loyalty infrastructure across the games industry.

Finextra
MEDIUMVulnerabilityNEW

MoonPay adds Discover network support

MoonPay, the leading crypto payments network, now accepts Discover Network payments for U.S. users of its platform.

Finextra
MEDIUMVulnerabilityNEW

Segpay appoints Tom John CTO

Segpay, a pioneer in digital payment processing, announced today that Tom John has joined the company as Chief Technology Officer. Tom will lead Segpay’s technology team and will oversee the continued development of Segpay’s payment platform as part of the company’s long-term growth plan.

Finextra