WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
ninja-forms-save-progress
Published
2026-09-04
Title
Ninja Forms - Save Progress < 3.0.31 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Data Deletion via admin-ajax.php with admin_init Hook
Slug
ninja-forms-scheduled-exports
Published
2026-09-04
Title
Ninja Forms - Scheduled Exports < 3.0.4 - Authenticated (Subscriber+) Stored Cross-Site Scripting via REST API Parameters
Slug
ninja-forms-style
Published
2026-09-01
Title
Ninja Forms - Layout & Styles < 3.0.32 - Unauthenticated PHP Object Injection
Slug
ninja-forms-uploads
Published
2019-04-11
Title
Ninja Forms File Uploads Extension <= 3.0.22 - Unauthenticated Arbitrary File Upload
Slug
ninja-forms-uploads
Published
2022-03-08
Title
Ninja Forms File Uploads Extension < 3.3.13 - Unauthenticated Stored Cross-Site Scripting
Slug
ninja-forms-uploads
Published
2022-03-08
Title
Ninja Forms File Uploads Extension < 3.3.1 - Unauthenticated Arbitrary File Upload
Slug
ninja-forms-uploads
Published
2024-09-06
Title
Ninja Forms File Uploads < 3.3.18 - Unauthenticated Stored Cross-Site Scripting via File Upload
Slug
ninja-forms-uploads
Published
2026-04-06
Title
Ninja Forms - File Upload < 3.3.27 - Unauthenticated Arbitrary File Upload
Slug
ninja-forms-uploads
Published
2026-07-02
Title
Ninja Forms - File Uploads < 3.3.30 - Missing Authorization to Unauthenticated Log Disclosure and Deletion via debug-log/delete-all and debug-log/get-all REST Endpoints
Slug
ninja-forms-uploads
Published
2026-07-01
Title
Ninja Forms - File Uploads < 3.3.30 - Unauthenticated Arbitrary File Read via File Upload Field 'files[].data.file_path' Parameter
Slug
ninja-forms-uploads
Published
2026-04-08
Title
Ninja Forms File Uploads Extension <= 3.3.26 - Cross-Site Request Forgery
Slug
ninja-forms-uploads
Published
2026-09-02
Title
Ninja Forms - File Uploads <= 3.3.26 - Unauthenticated Stored Cross-Site Scripting
Slug
ninja-forms-webhooks
Published
2025-05-13
Title
Ninja Forms Webhooks < 3.0.8 - Authenticated (Admin+) Server-Side Request Forgery via Form Webhook
Slug
ninja-gdpr-compliance
Published
2020-11-03
Title
GDPR CCPA Compliance Support < 2.4 - Unauthenticated PHP Object Injection
Slug
ninja-gdpr-compliance
Published
2024-06-06
Title
GDPR CCPA Compliance & Cookie Consent Banner < 2.7.1 - Missing Authorization to Settings Update and Stored Cross-Site Scripting
Slug
ninja-gdpr-compliance
Published
2025-01-24
Title
GDPR CCPA Compliance Support < 2.7.2 - Missing Authorization
Slug
ninja-gdpr-compliance
Published
2025-05-19
Title
GDPR CCPA Compliance Support < 2.7.4 - Missing Authorization
Slug
ninja-gdpr-compliance
Published
2026-01-19
Title
GDPR CCPA Compliance Support < 2.7.5 - Missing Authorization
Slug
ninja-job-board
Published
2022-08-01
Title
Ninja Job Board < 1.3.3 - Resume Disclosure via Directory Listing
Slug
ninja-page-categories-and-tags
Published
2025-01-08
Title
Ninja Pages <= 1.4.2 - Admin+ Stored XSS
Slug
ninja-tables
Published
2021-10-25
Title
Ninja Tables < 4.1.8 - Admin+ Stored Cross-Site Cross-Site Scripting
Slug
ninja-tables
Published
2023-04-19
Title
Ninja Tables < 4.3.5 - Admin+ Stored XSS
Slug
ninja-tables
Published
2024-01-19
Title
Ninja Tables < 5.0.7 - Contributor+ Table Data Access
Slug
ninja-tables
Published
2024-05-30
Title
Ninja Tables – Easiest Data Table Builder < 5.0.10 - Authenticated (Admin+) Server-Side Request Forgery
Slug
ninja-tables
Published
2024-08-26
Title
Ninja Tables – Easiest Data Table Builder < 5.0.13 - Authenticated (Author+) Stored Cross-Site Scripting via SVG File Upload