PT-2026-60703 · Saturday Drive · Ninja Forms - Excel Export

CVE-2026-15160 · Published 2026-07-17 · Updated 2026-07-17

NVD

CVSS v3.1

4.3

Medium

Base vector

AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N

The Ninja Forms - Excel Export plugin for WordPress is vulnerable to Directory Traversal in all versions up to, and including, 3.3.6 via the 'spreadsheet export tmp name' parameter. This makes it possible for authenticated attackers, with subscriber-level access and above, to write .xls/.xlsx files to arbitrary locations on the server, which can be used to stage further attacks.

Fix

Path traversal

Weakness Enumeration

CWE-22

Related Identifiers

CVE-2026-15160

Affected Products

Ninja Forms - Excel Export

References · 5

• https://nvd.nist.gov/vuln/detail/CVE-2026-15160 · Security Note
• https://plugins.trac.wordpress.org/browser/ninja-forms-excel-export/trunk/ninja-forms-excel-export.php#L95 · Note
• https://plugins.trac.wordpress.org/browser/ninja-forms-excel-export/trunk/includes/Admin/ExtractPostData.php#L125 · Note
• https://wordfence.com/threat-intel/vulnerabilities/id/24fb24cc-c29f-4d2d-87ba-5d211386e7dd?source=cve · Note
• https://plugins.trac.wordpress.org/browser/ninja-forms-excel-export/trunk/includes/Handlers/ExportFile.php#L485 · Note