WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
ninja-tables
Published
2025-01-09
Title
Ninja Tables < 5.0.17 - Admin+ Stored XSS
Slug
ninja-tables
Published
2025-06-02
Title
Ninja Tables – Easy Data Table Builder < 5.0.19 - Unauthenticated PHP Object Injection to Limited Remote Code Execution
Slug
ninja-tables
Published
2025-06-26
Title
Ninja Tables – Easy Data Table Builder < 5.0.19 - Unauthenticated Server-Side Request Forgery
Slug
ninja-tables
Published
2025-12-15
Title
Ninja Tables < 5.2.4 - Authenticated (Administrator+) SQL Injection
Slug
ninja-tables
Published
2026-01-07
Title
Ninja Tables < 5.2.5 - Authenticated (Contributor+) SQL Injection
Slug
ninja-tables
Published
2026-01-18
Title
Ninja Tables – Easy Data Table Builder < 5.2.6 - Authenticated (Contributor+) Information Exposure
Slug
ninja-tables
Published
2026-05-05
Title
Ninja Tables < 5.2.7 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Table Creation
Slug
ninja-tables
Published
2026-07-22
Title
Ninja Tables – Easy Data Table Builder < 5.2.11 - Unauthenticated Information Exposure
Slug
ninja-tables
Published
2026-08-04
Title
Ninja Tables – Easy Data Table Builder < 5.2.10 - Unauthenticated Stored Cross-Site Scripting
Slug
ninja-tables-pro
Published
2025-05-16
Title
Ninja Tables Pro < 5.0.18 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
ninja-tables-pro
Published
2026-08-03
Title
Fluent Forms Pro 6.2.7 & Ninja Tables Pro 5.2.11 - Backdoor via Compromised Vendor Update Server
Slug
ninjafirewall
Published
2021-05-30
Title
NinjaFirewall < 4.3.4 - Authenticated (admin+) PHAR Deserialization
Slug
ninjalibs-ses
Published
2022-02-28
Title
Unauthorised AJAX Calls via Freemius
Slug
ninjascanner
Published
2025-07-30
Title
NinjaScanner < 3.2.6 - Admin+ Arbitrary File Deletion
Slug
ninjateam-telegram
Published
2024-12-23
Title
NinjaTeam Chat for Telegram < 1.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
ninjateam-telegram
Published
2025-05-29
Title
NinjaTeam Chat for Telegram < 1.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via username Parameter
Slug
nino-social-connect
Published
2025-04-09
Title
Nino Social Connect <= 2.0 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Slug
nirweb-support
Published
2022-05-02
Title
Nirweb support < 2.8.2 - Unauthenticated SQLi
Slug
nirweb-support
Published
2025-01-31
Title
Nirweb support <= 3.0.3 - Missing Authorization
Slug
nite-shortcodes
Published
2025-01-16
Title
Nite Shortcodes <= 1.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
nitek-carousel-cool-transitions
Published
2022-02-28
Title
Unauthorised AJAX Calls via Freemius
Slug
nitek-carousel-cool-transitions
Published
2019-02-26
Title
Freemius Library < 2.2.4 - Subscriber+ Arbitrary Option Update
Slug
nitek-carousel-cool-transitions
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting
Slug
nitropack
Published
2023-12-28
Title
NitroPack < 1.10.3 - Multiple CSRF
Slug
nitropack
Published
2023-11-07
Title
NitroPack < 1.10.0 - Missing Authorization via multiple AJAX functions