Exploit for CVE-2026-0740

githubexploit · 2026-08-22

Description

Exploit for CVE-2026-0740; no further details provided.

Entry point

Parameteraction · request body

Path/wp-admin/admin-ajax.php

Arbitrary file upload via missing file type validation in NF_FU_AJAX_Controllers_Uploads::handle_upload (CVE-2026-0740)

All known vulnerabilities by product

Ninja Forms - File Uploads

CVSS 9.8 for CVE-2026-0740

9.8

HIGH SEVERITY

Version 3.1

VectorCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Attack Vector:NETWORK

Attack Complexity:LOW

Privileges Required:NONE

User Interaction:NONE

Scope:UNCHANGED

Confidentiality:HIGH

Integrity:HIGH

Availability:HIGH

Working code

96%confidence this exploit runs

Based on 1 file(s) in the source

CVE Information

CVE-2026-0740

Exploit Details

Modified:2026-08-22 02:43

Last Seen:2026-08-22 02:51

Reporter:llaytynher

Last commit:2026-08-22

Other exploits for CVE-2026-0740

CVE-2026-0740

2026-08-25 KitPloitKITPLOIT

ninja-form-exploit

2026-08-25 KitPloitKITPLOIT

CVE-2026-0740-mass

2026-08-24 KitPloitKITPLOIT

CVE-2026-0740

2026-08-24 KitPloitKITPLOIT

CVE-2026-0740-upload-template

2026-08-24 KitPloitKITPLOIT

New release PoC-in-GitHub

2026-07-25 KitPloitKITPLOIT

Exploit for CVE-2026-0740

2026-07-14 MadExploitsGITHUB

Exploit for CVE-2026-0740

2026-07-11 ExDev994GITHUB

Exploit Code

README2 lines

## https://sploitus.com/exploit?id=CD1F93C6-4EF9-5C03-A2B2-46A8D7B1FD54
No description provided

Exploit Code

Share

Share on social media: