CVE-2026-0740 - Vulnerability Details

Related Threat Clusters

• Critical Vulnerability in Ninja Forms Plugin Exposes 50,000 WordPress Sites to RCE

  A critical vulnerability (CVE-2026-0740) in the Ninja Forms File Uploads plugin for WordPress allows unauthenticated attackers to upload arbitrary files, potentially leading to remote code execution. This flaw, with a…

  6 articles · Updated April 7, 2026

Recent Intelligence Reports

• Hackers exploit critical flaw in Ninja Forms WordPress plugin — Bleepingcomputer · April 7, 2026
• Hackers exploit critical flaw in Ninja Forms WordPress plugin — Bleepingcomputer · April 7, 2026
• 50,000 WordPress Sites Exposed to Critical Ninja Forms File Upload RCE Vulnerability — Cybersecuritynews · April 7, 2026
• 50,000 WordPress Sites Running Ninja Forms Vulnerable to Critical File Upload RCE — Gbhackers · April 7, 2026

Related Entities