Skip to content

Ninja Team vulnerabilities

Products

Newest

mndpsingh287 file manager, ninja team file manager pro, unknown fileorganizer +2 more Multiple elFinder Plugins - DOM-based XSS via postMessage Origin Bypass CVE-2026-85081 7.5 HighSeptember 26, 2026
mndpsingh287 file manager, ninja team file manager pro, saad iqbal advanced file manager +1 more +3 more Multiple elFinder Plugins - Authenticated OS Command Injection CVE-2026-6382 9.1 CriticalJuly 6, 2026
ninja team fastdup WordPress FastDup plugin <= 2.7.2 - Path Traversal vulnerability CVE-2026-52703 9.6 CriticalJune 15, 2026
ninja team gdpr ccpa compliance support WordPress GDPR CCPA Compliance Support plugin <= 2.7.4 - Broken Access Control vulnerability CVE-2025-68073 6.5 MediumJanuary 22, 2026
file manager pro, ninja team file manager pro, ninjateam file manager pro – filester +1 more +3 more Multiple elFinder Plugins <= (Various Versions) - Directory Traversal to Arbitrary File Deletion CVE-2025-0818 6.5 MediumAugust 13, 2025
ninja team file manager pro WordPress File Manager Pro plugin <= 1.8.8 - Cross Site Scripting (XSS) Vulnerability CVE-2025-52710 5.9 MediumJune 20, 2025
ninja team gdpr ccpa compliance support WordPress GDPR CCPA Compliance Support plugin <= 2.7.3 - Broken Access Control Vulnerability CVE-2025-48260 4.3 MediumMay 19, 2025
ninja team click to chat – wp support all-in-one floating widget WordPress Click to Chat – WP Support All-in-One Floating Widget plugin <= 2.3.4 - Cross Site Scripting (XSS) vulnerability CVE-2025-31092 6.5 MediumMarch 27, 2025
ninja team filebird WordPress FileBird plugin <= 6.4.2.1 - Insecure Direct Object References (IDOR) vulnerability CVE-2025-26977 3.8 LowFebruary 25, 2025
ninja team gdpr ccpa compliance support, ninjateam gdpr ccpa compliance \& cookie consent banner +1 more WordPress GDPR CCPA Compliance & Cookie Consent Banner plugin <= 2.7.1 - Broken Access Control vulnerability CVE-2025-24591 4.3 MediumJanuary 24, 2025
ninja team notibar WordPress Notibar plugin <= 2.1.4 - Broken Access Control vulnerability CVE-2024-54269 4.3 MediumDecember 11, 2024
ninja team filebird WordPress FileBird plugin <= 5.1.4 - Broken Access Control vulnerability CVE-2023-25966 5.5 MediumDecember 9, 2024
ninja team filebird WordPress FileBird Lite plugin <= 6.3.2 - Broken Access Control vulnerability CVE-2024-53825 4.7 MediumDecember 6, 2024
ninja team click to chat – wp support all-in-one floating widget, ninjateam click to chat +1 more WordPress Click to Chat – WP Support All-in-One Floating Widget plugin <= 2.3.3 - Cross Site Scripting (XSS) vulnerability CVE-2024-49281 6.5 MediumOctober 17, 2024
file manager pro, filemanagerpro file manager, ninja team file manager pro +2 more File Manager Pro <= 8.3.9 - Cross-Site Request Forgery to Arbitrary File Upload CVE-2024-8507 8.8 HighOctober 16, 2024
file manager pro, filemanagerpro file manager, file manager pro +2 more File Manager Pro <= 8.3.9 - Unauthenticated Backup File Download and Upload CVE-2024-8746 7.5 HighOctober 16, 2024
file manager pro, filemanagerpro file manager, file manager pro +2 more File Manager Pro <= 8.3.9 - Unauthenticated Limited JavaScript File Upload CVE-2024-8918 7.4 HighOctober 16, 2024
ninja team multi step for contact form, ninjateam multi step for contact form 7 +1 more WordPress Multi Step for Contact Form plugin <= 2.7.7 - Unauthenticated SQL Injection vulnerability CVE-2024-47331 9.3 CriticalOctober 11, 2024
file manager pro, filemanagerpro file manager pro +1 more File Manager Pro <= 8.3.7 - Authenticated (Subscriber+) Arbitrary File Upload CVE-2024-7559 8.8 HighAugust 23, 2024
ninja team beaver add-ons for beaver builder, ninjabeaveraddon ninja beaver add-ons for beaver builder +1 more WordPress Ninja Beaver Add-ons for Beaver Builder plugin <= 2.4.5 - Cross Site Scripting (XSS) vulnerability CVE-2024-37244 6.5 MediumJuly 22, 2024
ninja team filebird document library WordPress FileBird Document Library plugin <= 2.0.6 - Sensitive Data Exposure vulnerability CVE-2024-37504 5.3 MediumJuly 10, 2024
ninja team beaver add-ons for beaver builder, njba ninja beaver add-ons for beaver builder +1 more Ninja Beaver Add-ons for Beaver Builder <= 2.4.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via Widgets CVE-2024-2163 6.4 MediumMay 22, 2024
ninja team filebird, firebirdsql firebird +1 more WordPress FileBird – WordPress Media Library Folders & File Manager plugin <= 5.6.3 - Sensitive Data Exposure vulnerability CVE-2024-35166 5.3 MediumMay 13, 2024
file manager pro, filemanagerpro.io file manager pro +1 more File Manager Pro <= 8.3.4 - Reflected Cross-Site Scripting CVE-2023-7015 6.1 MediumMarch 13, 2024
file manager pro, file manager project manager, filemanagerpro file manager pro +1 more +3 more File Manager And File Manager Pro (Multiple Versions) - Directory Traversal CVE-2023-6825 9.9 CriticalMarch 13, 2024
file manager pro, filemanagerpro file manager, ninja team file manager pro +2 more File Manager Pro <= 8.3.4 - Authenticated (Subscriber+) Arbitrary File Upload CVE-2023-6846 EPSS 15.9% 8.8 HighFebruary 5, 2024
ninja team fastdup – fastest wordpress migration & duplicator, ninjateam fastdup +1 more WordPress FastDup Plugin <= 2.1.7 is vulnerable to Sensitive Data Exposure CVE-2023-51406 5.3 MediumJanuary 8, 2024
ninja team file manager pro, ninjateam filester +1 more File Manager Pro < 1.8.1 - Admin+ Remote Code Execution CVE-2023-4861 Public exploit 7.2 HighOctober 16, 2023
ninja team file manager pro, ninjateam filester +1 more File Manager Pro < 1.8.1 - Admin+ Stored Cross-Site Scripting CVE-2023-4862 4.8 MediumOctober 16, 2023
ninja team file manager pro, ninjateam filester +1 more File Manager Pro < 1.8 - Remote Code Execution via CSRF CVE-2023-4827 8.8 HighOctober 16, 2023
ninjateam filebird, ninja team filebird – wordpress media library folders & file manager +1 more Filebird 4.7.3 - Unauthenticated SQL Injection CVE-2021-24385 9.8 CriticalJuly 12, 2021