WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
ninja-forms
Published
2025-01-29
Title
Ninja Forms < 3.8.25 - Contributor+ Stored XSS
Slug
ninja-forms
Published
2025-04-28
Title
Ninja Forms < 3.10.1 - Admin+ Stored XSS
Slug
ninja-forms
Published
2025-04-28
Title
Ninja Forms < 3.10.1 - Admin+ Stored XSS
Slug
ninja-forms
Published
2025-04-28
Title
Ninja Forms < 3.10.1 - Admin+ Stored XSS
Slug
ninja-forms
Published
2025-06-26
Title
Ninja Forms < 3.10.2.2 - Contributor+ Stored XSS via CSTI
Slug
ninja-forms
Published
2025-08-28
Title
Ninja-forms < 3.11.1 - Unauthenticated PHP Object Injection
Slug
ninja-forms
Published
2025-09-26
Title
Ninja Forms < 3.12.1 - Statistics Collection Opt In via CSRF
Slug
ninja-forms
Published
2025-09-26
Title
Ninja Forms < 3.12.1 - Limited File Deletion via CSRF
Slug
ninja-forms
Published
2025-12-12
Title
Ninja Forms < 3.13.3 - Unauthenticated Token Generation and Submission Disclosure
Slug
ninja-forms-uploads
Published
2019-04-11
Title
Ninja Forms File Uploads Extension <= 3.0.22 - Unauthenticated Arbitrary File Upload
Slug
ninja-forms-uploads
Published
2022-03-08
Title
Ninja Forms File Uploads Extension < 3.3.13 - Unauthenticated Stored Cross-Site Scripting
Slug
ninja-forms-uploads
Published
2022-03-08
Title
Ninja Forms File Uploads Extension < 3.3.1 - Unauthenticated Arbitrary File Upload
Slug
ninja-forms-uploads
Published
2024-09-06
Title
Ninja Forms File Uploads < 3.3.18 - Unauthenticated Stored Cross-Site Scripting via File Upload
Slug
ninja-forms-webhooks
Published
2025-05-13
Title
Ninja Forms Webhooks < 3.0.8 - Authenticated (Admin+) Server-Side Request Forgery via Form Webhook
Slug
ninja-gdpr-compliance
Published
2020-11-03
Title
GDPR CCPA Compliance Support < 2.4 - Unauthenticated PHP Object Injection
Slug
ninja-gdpr-compliance
Published
2024-06-06
Title
GDPR CCPA Compliance & Cookie Consent Banner < 2.7.1 - Missing Authorization to Settings Update and Stored Cross-Site Scripting
Slug
ninja-gdpr-compliance
Published
2025-01-24
Title
GDPR CCPA Compliance Support < 2.7.2 - Missing Authorization
Slug
ninja-gdpr-compliance
Published
2025-05-19
Title
GDPR CCPA Compliance Support < 2.7.4 - Missing Authorization
Slug
ninja-job-board
Published
2022-08-01
Title
Ninja Job Board < 1.3.3 - Resume Disclosure via Directory Listing
Slug
ninja-page-categories-and-tags
Published
2025-01-08
Title
Ninja Pages <= 1.4.2 - Admin+ Stored XSS
Slug
ninja-tables
Published
2021-10-25
Title
Ninja Tables < 4.1.8 - Admin+ Stored Cross-Site Cross-Site Scripting
Slug
ninja-tables
Published
2023-04-19
Title
Ninja Tables < 4.3.5 - Admin+ Stored XSS
Slug
ninja-tables
Published
2024-01-19
Title
Ninja Tables < 5.0.7 - Contributor+ Table Data Access
Slug
ninja-tables
Published
2024-05-30
Title
Ninja Tables – Easiest Data Table Builder < 5.0.10 - Authenticated (Admin+) Server-Side Request Forgery
Slug
ninja-tables
Published
2024-08-26
Title
Ninja Tables – Easiest Data Table Builder < 5.0.13 - Authenticated (Author+) Stored Cross-Site Scripting via SVG File Upload