WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
ninja-forms-webhooks
Published
2025-05-13
Title
Ninja Forms Webhooks < 3.0.8 - Authenticated (Admin+) Server-Side Request Forgery via Form Webhook
Slug
ninja-gdpr-compliance
Published
2020-11-03
Title
GDPR CCPA Compliance Support < 2.4 - Unauthenticated PHP Object Injection
Slug
ninja-gdpr-compliance
Published
2024-06-06
Title
GDPR CCPA Compliance & Cookie Consent Banner < 2.7.1 - Missing Authorization to Settings Update and Stored Cross-Site Scripting
Slug
ninja-gdpr-compliance
Published
2025-01-24
Title
GDPR CCPA Compliance Support < 2.7.2 - Missing Authorization
Slug
ninja-gdpr-compliance
Published
2025-05-19
Title
GDPR CCPA Compliance Support < 2.7.4 - Missing Authorization
Slug
ninja-gdpr-compliance
Published
2026-01-19
Title
GDPR CCPA Compliance Support < 2.7.5 - Missing Authorization
Slug
ninja-job-board
Published
2022-08-01
Title
Ninja Job Board < 1.3.3 - Resume Disclosure via Directory Listing
Slug
ninja-page-categories-and-tags
Published
2025-01-08
Title
Ninja Pages <= 1.4.2 - Admin+ Stored XSS
Slug
ninja-tables
Published
2021-10-25
Title
Ninja Tables < 4.1.8 - Admin+ Stored Cross-Site Cross-Site Scripting
Slug
ninja-tables
Published
2023-04-19
Title
Ninja Tables < 4.3.5 - Admin+ Stored XSS
Slug
ninja-tables
Published
2024-01-19
Title
Ninja Tables < 5.0.7 - Contributor+ Table Data Access
Slug
ninja-tables
Published
2024-05-30
Title
Ninja Tables – Easiest Data Table Builder < 5.0.10 - Authenticated (Admin+) Server-Side Request Forgery
Slug
ninja-tables
Published
2024-08-26
Title
Ninja Tables – Easiest Data Table Builder < 5.0.13 - Authenticated (Author+) Stored Cross-Site Scripting via SVG File Upload
Slug
ninja-tables
Published
2025-01-09
Title
Ninja Tables < 5.0.17 - Admin+ Stored XSS
Slug
ninja-tables
Published
2025-06-02
Title
Ninja Tables – Easy Data Table Builder < 5.0.19 - Unauthenticated PHP Object Injection to Limited Remote Code Execution
Slug
ninja-tables
Published
2025-06-26
Title
Ninja Tables – Easy Data Table Builder < 5.0.19 - Unauthenticated Server-Side Request Forgery
Slug
ninja-tables
Published
2025-12-15
Title
Ninja Tables < 5.2.4 - Authenticated (Administrator+) SQL Injection
Slug
ninja-tables
Published
2026-01-07
Title
Ninja Tables < 5.2.5 - Authenticated (Contributor+) SQL Injection
Slug
ninja-tables-pro
Published
2025-05-16
Title
Ninja Tables Pro < 5.0.18 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
ninjafirewall
Published
2021-05-30
Title
NinjaFirewall < 4.3.4 - Authenticated (admin+) PHAR Deserialization
Slug
ninjalibs-ses
Published
2022-02-28
Title
Unauthorised AJAX Calls via Freemius
Slug
ninjascanner
Published
2025-07-30
Title
NinjaScanner < 3.2.6 - Admin+ Arbitrary File Deletion
Slug
ninjateam-telegram
Published
2024-12-23
Title
NinjaTeam Chat for Telegram < 1.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
ninjateam-telegram
Published
2025-05-29
Title
NinjaTeam Chat for Telegram < 1.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via username Parameter
Slug
nino-social-connect
Published
2025-04-09
Title
Nino Social Connect <= 2.0 - Cross-Site Request Forgery to Stored Cross-Site Scripting