WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
nifty-backups
Published
2025-08-29
Title
Nifty Backups <= 1.08 - Reflected Cross-Site Scripting
Slug
nifty-coming-soon-and-under-construction-page
Published
2020-09-16
Title
Multiple Plugins/Themes - Cross-Site Request Forgery (CSRF)
Slug
night-mode
Published
2022-04-25
Title
Night Mode < 1.4.0 - Admin+ Stored Cross-Site Scripting
Slug
nimbata-call-tracking
Published
2025-04-09
Title
Nimbata Call Tracking <= 1.7.3 - Stored XSS via CSRF
Slug
nimble-builder
Published
2022-03-29
Title
Nimble Page Builder < 3.2.2 - Reflected Cross-Site Scripting
Slug
nimble-portfolio
Published
2024-06-18
Title
WordPress Picture / Portfolio / Media Gallery <= 3.0.1 - Unauthenticated Server-Side Request Forgery
Slug
ninja-beaver-lite-addons-for-beaver-builder
Published
2024-05-21
Title
Ninja Beaver Add-ons for Beaver Builder <= 2.4.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via Widgets
Slug
ninja-charts
Published
2025-09-05
Title
Ninja Charts < 3.3.6 - Unauthenticated Information Exposure
Slug
ninja-countdown
Published
2025-11-10
Title
Ninja Countdown <= 1.5.0 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Countdown Deletion
Slug
ninja-forms
Published
2014-11-04
Title
Ninja Forms 2.8.6 - Reflected Cross-Site Scripting (XSS)
Slug
ninja-forms
Published
2015-02-11
Title
Ninja Forms <= 2.8.8 - Stored & Reflected XSS
Slug
ninja-forms
Published
2014-12-02
Title
Ninja Forms <= 2.8.9 - Unspecified Issue Affecting Admin Users
Slug
ninja-forms
Published
2015-04-20
Title
Ninja Forms <= 2.9.10 - Cross-Site Scripting (XSS)
Slug
ninja-forms
Published
2015-06-05
Title
Ninja Forms <= 2.9.18 - Cross-Site Scripting (XSS)
Slug
ninja-forms
Published
2015-08-04
Title
Ninja Forms <= 2.9.21 - Authenticated Reflected Cross-Site Scripting (XSS)
Slug
ninja-forms
Published
2015-09-30
Title
Ninja Forms <= 2.9.27 - Malicious File Export
Slug
ninja-forms
Published
2016-05-04
Title
Ninja Forms 2.9.36 to 2.9.42 - Multiple Vulnerabilities
Slug
ninja-forms
Published
2016-07-19
Title
Ninja Forms <= 2.9.51 - Multiple Authenticated Cross-Site Scripting (XSS)
Slug
ninja-forms
Published
2016-08-16
Title
Ninja Forms <= 2.9.55.1 - Authenticated SQL Injection
Slug
ninja-forms
Published
2018-02-20
Title
Ninja Forms <= 3.2.13 - Cross-Site Scripting (XSS)
Slug
ninja-forms
Published
2018-08-21
Title
Ninja Forms <= 3.3.13 - CSV Injection
Slug
ninja-forms
Published
2018-08-27
Title
Ninja Forms <= 3.3.13 - Cross-Site Scripting (XSS) in Import Function
Slug
ninja-forms
Published
2018-11-14
Title
Ninja Forms <= 3.3.17 - Unauthenticated Cross-Site Scripting (XSS)
Slug
ninja-forms
Published
2018-12-01
Title
Ninja Forms <= 3.3.19 - Authenticated Open Redirect
Slug
ninja-forms
Published
2019-01-10
Title
Ninja Forms < 3.3.21.3 - XSS and SQLi