WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
ninja-tables
Published
2025-01-09
Title
Ninja Tables < 5.0.17 - Admin+ Stored XSS
Slug
ninja-tables
Published
2025-06-02
Title
Ninja Tables – Easy Data Table Builder < 5.0.19 - Unauthenticated PHP Object Injection to Limited Remote Code Execution
Slug
ninja-tables
Published
2025-06-26
Title
Ninja Tables – Easy Data Table Builder < 5.0.19 - Unauthenticated Server-Side Request Forgery
Slug
ninja-tables
Published
2025-12-15
Title
Ninja Tables < 5.2.4 - Authenticated (Administrator+) SQL Injection
Slug
ninja-tables
Published
2026-01-07
Title
Ninja Tables < 5.2.5 - Authenticated (Contributor+) SQL Injection
Slug
ninja-tables-pro
Published
2025-05-16
Title
Ninja Tables Pro < 5.0.18 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
ninjafirewall
Published
2021-05-30
Title
NinjaFirewall < 4.3.4 - Authenticated (admin+) PHAR Deserialization
Slug
ninjalibs-ses
Published
2022-02-28
Title
Unauthorised AJAX Calls via Freemius
Slug
ninjascanner
Published
2025-07-30
Title
NinjaScanner < 3.2.6 - Admin+ Arbitrary File Deletion
Slug
ninjateam-telegram
Published
2024-12-23
Title
NinjaTeam Chat for Telegram < 1.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
ninjateam-telegram
Published
2025-05-29
Title
NinjaTeam Chat for Telegram < 1.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via username Parameter
Slug
nino-social-connect
Published
2025-04-09
Title
Nino Social Connect <= 2.0 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Slug
nirweb-support
Published
2022-05-02
Title
Nirweb support < 2.8.2 - Unauthenticated SQLi
Slug
nirweb-support
Published
2025-01-31
Title
Nirweb support <= 3.0.3 - Missing Authorization
Slug
nite-shortcodes
Published
2025-01-16
Title
Nite Shortcodes <= 1.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
nitek-carousel-cool-transitions
Published
2022-02-28
Title
Unauthorised AJAX Calls via Freemius
Slug
nitek-carousel-cool-transitions
Published
2019-02-26
Title
Freemius Library < 2.2.4 - Subscriber+ Arbitrary Option Update
Slug
nitek-carousel-cool-transitions
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting
Slug
nitropack
Published
2023-12-28
Title
NitroPack < 1.10.3 - Multiple CSRF
Slug
nitropack
Published
2023-11-07
Title
NitroPack < 1.10.0 - Missing Authorization via multiple AJAX functions
Slug
nitropack
Published
2024-08-26
Title
NitroPack < 1.16.8 - Unauthenticated Arbitrary Shortcode Execution
Slug
nitropack
Published
2025-01-14
Title
NitroPack < 1.17.6 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Transient Update
Slug
nitropack
Published
2025-01-14
Title
NitroPack < 1.17.6 - Subscriber+ Limited Options Update
Slug
nitropack
Published
2025-09-09
Title
NitroPack < 1.18.5 - Missing Authorization to Authenticated (Subscriber+) Limited Settings Update via nitropack_set_compression_ajax Function
Slug
nix-anti-spam-light
Published
2024-11-15
Title
NIX Anti-Spam Light <= 0.0.4 - Unauthenticated PHP Object Injection