WordPress Plugin Vulnerabilities | Page 16 | WPScan

0-9
a
b
c
d
e
f
g
h
i
j
k
l
m
n
o
p
q
r
s
t
u
v
w
x
y
z

Slug

Published

2024-09-24

Title

NiceJob < 3.6.5 - Authenticated (Contributor+) Stored Cross-Site Scripting

Slug

Published

2024-09-24

Title

NiceJob < 3.6.5 - Cross-Site Request Forgery to Stored Cross-Site Scripting

Slug

Published

2024-11-12

Title

NiceJob < 3.7.2 - Contributor+ Stored XSS

Slug

Published

2024-12-11

Title

NiceJob < 3.7.2 - Authenticated (Contributor+) Stored Cross-Site Scripting

Slug

Published

2026-01-06

Title

Niche Hero | Beautifully-designed blocks in seconds <= 1.0.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'spacing' Shortcode Attribute

Slug

Published

2022-02-28

Title

Unauthorised AJAX Calls via Freemius

Slug

Published

2023-07-18

Title

Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting

Slug

Published

2025-08-29

Title

Nifty Backups <= 1.08 - Reflected Cross-Site Scripting

Slug

nifty-coming-soon-and-under-construction-page

Published

2020-09-16

Title

Multiple Plugins/Themes - Cross-Site Request Forgery (CSRF)

Slug

Published

2022-04-25

Title

Night Mode < 1.4.0 - Admin+ Stored Cross-Site Scripting

Slug

nimbata-call-tracking

Published

2025-04-09

Title

Nimbata Call Tracking <= 1.7.3 - Stored XSS via CSRF

Slug

Published

2022-03-29

Title

Nimble Page Builder < 3.2.2 - Reflected Cross-Site Scripting

Slug

nimble-portfolio

Published

2024-06-18

Title

WordPress Picture / Portfolio / Media Gallery <= 3.0.1 - Unauthenticated Server-Side Request Forgery

Slug

ninja-beaver-lite-addons-for-beaver-builder

Published

2024-05-21

Title

Ninja Beaver Add-ons for Beaver Builder <= 2.4.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via Widgets

Slug

Published

2025-09-05

Title

Ninja Charts < 3.3.6 - Unauthenticated Information Exposure

Slug

ninja-countdown

Published

2025-11-10

Title

Ninja Countdown <= 1.5.0 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Countdown Deletion

Slug

Published

2014-11-04

Title

Ninja Forms 2.8.6 - Reflected Cross-Site Scripting (XSS)

Slug

Published

2015-02-11

Title

Ninja Forms <= 2.8.8 - Stored & Reflected XSS

Slug

Published

2014-12-02

Title

Ninja Forms <= 2.8.9 - Unspecified Issue Affecting Admin Users

Slug

Published

2015-04-20

Title

Ninja Forms <= 2.9.10 - Cross-Site Scripting (XSS)

Slug

Published

2015-06-05

Title

Ninja Forms <= 2.9.18 - Cross-Site Scripting (XSS)

Slug

Published

2015-08-04

Title

Ninja Forms <= 2.9.21 - Authenticated Reflected Cross-Site Scripting (XSS)

Slug

Published

2015-09-30

Title

Ninja Forms <= 2.9.27 - Malicious File Export

Slug

Published

2016-05-04

Title

Ninja Forms 2.9.36 to 2.9.42 - Multiple Vulnerabilities

Slug

Published

2016-07-19

Title

Ninja Forms <= 2.9.51 - Multiple Authenticated Cross-Site Scripting (XSS)