Wpmanageninja vulnerabilities

Products

• Ninja Tables 10
• Fluent Forms – Customizable Contact Forms, Survey, Quiz, & Conversational Form Builder 7
• Fluent Support 5
• Fluentcart A New Era Of Ecommerce – Faster, Lighter, And Simpler 4
• Fluentsmtp 4
• Best Payments Plugin For Wp 2
• Fluentcart 2
• Fluentcrm 2
• Fluent Support 2
• Fluent Support – Helpdesk & Customer Support Ticket System 2
• Ninja Tables 2

Newest

• techjewel fluent support – helpdesk & customer support ticket system Fluent Support <= 2.4.7 — Unauthenticated Limited Modification of Linked Customer Profile Fields via Fluent Forms Feed CVE-2026-119213 3.7 LowNovember 7, 2026
• wpmanageninja fluentcart a new era of ecommerce – faster, lighter, and simpler FluentCart A New Era of eCommerce <= 1.6.2 - Authenticated (Custom+) Arbitrary File Deletion via 'file_path' Parameter CVE-2026-120577 8.1 HighNovember 3, 2026
• wpmanageninja fluentcart a new era of ecommerce – faster, lighter, and simpler FluentCart A New Era of eCommerce <= 1.7.0 - Insecure Direct Object Reference to Unauthenticated Sensitive Information Disclosure via 'order_id' and 'billing_address_id' Parameters CVE-2026-103525 7.5 HighOctober 16, 2026
• wpmanageninja fluentcart a new era of ecommerce – faster, lighter, and simpler FluentCart A New Era of eCommerce <= 1.7.0 - Authenticated (Administrator+) SQL Injection via 'products.variants' Array Keys CVE-2026-103518 4.9 MediumOctober 16, 2026
• wpmanageninja fluentcart WordPress FluentCart plugin <= 1.7.1 - Sensitive Data Exposure vulnerability CVE-2026-109695 7.5 HighOctober 15, 2026
• wpmanageninja best payments plugin for wp WordPress Best Payments Plugin for WP plugin <= 4.6.27 - Cross Site Scripting (XSS) vulnerability CVE-2026-108484 7.1 HighOctober 14, 2026
• techjewel fluent forms – customizable contact forms, survey, quiz, & conversational form builder Fluent Forms <= 6.2.5 - Missing Authorization to Authenticated (Custom+) Sensitive Data Exposure and Modification CVE-2026-15178 5.4 MediumOctober 10, 2026
• techjewel fluent forms – customizable contact forms, survey, quiz, & conversational form builder Fluent Forms <= 6.2.14 - Reflected Cross-Site Scripting via '{get.*}' Editor SmartCode Parameter CVE-2026-101324 4.7 MediumOctober 10, 2026
• shahjahan jewel fluent support WordPress Fluent Support plugin <= 2.3.2 - Broken Access Control vulnerability CVE-2026-94679 5.4 MediumSeptember 23, 2026
• techjewel fluent forms pro add on pack WordPress Fluent Forms Pro Add On Pack plugin < 6.2.12 - Cross Site Scripting (XSS) vulnerability CVE-2026-66633 7.1 HighAugust 18, 2026
• wpmanageninja fluent forms pro Fluent Forms Pro 6.2.7 Embedded Malicious Code via Tampered Plugin Build CVE-2026-73532 9.3 CriticalAugust 13, 2026
• wpmanageninja ninja tables pro Ninja Tables Pro 5.2.11 Embedded Malicious Code via Tampered Plugin Build CVE-2026-73533 9.3 CriticalAugust 13, 2026
• shahjahan jewel fluentcommunity WordPress FluentCommunity plugin <= 2.7.5 - Cross Site Scripting (XSS) vulnerability CVE-2026-66467 6.5 MediumAugust 13, 2026
• techjewel fluent forms – customizable contact forms, survey, quiz, & conversational form builder Fluent Forms <= 6.2.11 - Unauthenticated Stored Cross-Site Scripting via Notification Smartcode Values CVE-2026-18146 7.2 HighAugust 13, 2026
• shahjahan jewel ninja tables WordPress Ninja Tables plugin <= 5.2.9 - Cross Site Scripting (XSS) vulnerability CVE-2026-61964 7.1 HighAugust 6, 2026
• wpmanageninja fluentsmtp – wp smtp plugin with amazon ses, sendgrid, mailgun, postmark, cloudflare, tosend, gmail and any smtp FluentSMTP <= 2.2.95 - Unauthenticated Stored Cross-Site Scripting via Recipient Display Name (to.name) in Email Logs CVE-2026-16636 7.2 HighAugust 6, 2026
• techjewel fluent forms – customizable contact forms, survey, quiz, & conversational form builder Fluent Forms <= 6.2.8 - Reflected Cross-Site Scripting via 'param' CVE-2026-17571 6.1 MediumAugust 1, 2026
• techjewel fluent forms – customizable contact forms, survey, quiz, & conversational form builder Fluent Forms <= 6.2.8 - Unauthenticated Sensitive Information Exposure via Insecure Direct Object Reference and Weak Transaction Hash in 'transaction' Parameter CVE-2026-17567 5.3 MediumJuly 31, 2026
• techjewel fluent forms – customizable contact forms, survey, quiz, & conversational form builder Fluent Forms <= 6.2.7 - Unauthenticated Stored Cross-Site Scripting via Name Field Nested `password` Member CVE-2026-16655 7.2 HighJuly 29, 2026
• techjewel fluent support – helpdesk & customer support ticket system Fluent Support <= 2.3.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'redirect-to' Shortcode Attribute CVE-2026-15665 6.4 MediumJuly 24, 2026
• shahjahan jewel ninja tables WordPress Ninja Tables plugin <= 5.2.10 - Sensitive Data Exposure vulnerability CVE-2026-65474 5.3 MediumJuly 23, 2026
• shahjahan jewel fluent support WordPress Fluent Support plugin <= 2.3.0 - Cross Site Scripting (XSS) vulnerability CVE-2026-65470 6.5 MediumJuly 23, 2026
• wp email newsletter team - fluentcrm fluent crm WordPress Fluent CRM plugin <= 3.1.7 - Cross Site Scripting (XSS) vulnerability CVE-2026-57715 7.1 HighJuly 13, 2026
• techjewel fluent forms – customizable contact forms, survey, quiz, & conversational form builder Fluent Forms <= 6.2.1 - Incorrect Authorization to Authenticated (Subscriber+) Arbitrary Subscription Cancellation via 'subscription_id' CVE-2026-5069 5.4 MediumJuly 10, 2026
• wpmanageninja best payments plugin for wp WordPress Best Payments Plugin for WP plugin <= 4.6.19 - Payment Bypass vulnerability CVE-2026-42655 7.5 HighJune 15, 2026
• wpmanageninja fluentcart WordPress FluentCart plugin < 1.3.0 - Cross Site Scripting (XSS) vulnerability CVE-2025-67971 7.1 HighFebruary 20, 2026
• wpmanageninja fluentcart a new era of ecommerce – faster, lighter, and simpler FluentCart A New Era of eCommerce <= 1.3.1 - Authenticated (Administrator+) SQL Injection via 'groupKey' Parameter CVE-2025-13495 4.9 MediumDecember 3, 2025
• techjewel ninja tables – easy data table builder, wpmanageninja ninja tables +1 more Ninja Tables – Easy Data Table Builder <= 5.0.18 - Unauthenticated Server-Side Request Forgery CVE-2025-2940 7.2 HighJune 27, 2025
• techjewel ninja tables – easy data table builder, wpmanageninja ninja tables +1 more Ninja Tables – Easy Data Table Builder <= 5.0.18 - Unauthenticated PHP Object Injection to Limited Remote Code Execution CVE-2025-2939 5.6 MediumJune 3, 2025
• techjewel fluent support – helpdesk & customer support ticket system, wpmanageninja fluent support +1 more Fluent Support – Helpdesk & Customer Support Ticket System <= 1.8.5 - Unauthenticated Sensitive Information Exposure Through Unprotected Directory CVE-2024-13568 7.5 HighMarch 1, 2025
• shahjahan jewel ninja tables Ninja Tables < 5.0.17 - Admin+ Stored XSS CVE-2024-12772 5.4 MediumJanuary 31, 2025
• techjewel fluentsmtp – wp smtp plugin with amazon ses, sendgrid, mailgun, postmark, google and any smtp provider, wpmanageninja fluentsmtp +1 more FluentSMTP – WP SMTP Plugin with Amazon SES, SendGrid, MailGun, Postmark, Google and Any SMTP Provider <= 2.2.82 - Unauthenticated PHP Object Injection CVE-2024-9511 9.8 CriticalNovember 23, 2024
• shahjahan jewel trendy restaurant menu WordPress Trendy Restaurant Menu plugin <= 1.0.0 - Cross Site Scripting (XSS) vulnerability CVE-2024-51796 6.5 MediumNovember 19, 2024
• shahjahan jewel fluent support WordPress Fluent Support plugin <= 1.8.0 - Broken Access Control on Email Verification vulnerability CVE-2024-47302 5.3 MediumNovember 1, 2024
• shahjahan jewel fluent support WordPress Fluent Support plugin <= 1.8.0 - SQL Injection vulnerability CVE-2024-47304 8.5 HighOctober 17, 2024
• wpmanageninja ninja tables, techjewel ninja tables – easy data table builder +1 more Ninja Tables – Easiest Data Table Builder <= 5.0.12 - Authenticated (Author+) Stored Cross-Site Scripting via SVG File Upload CVE-2024-7304 6.4 MediumAugust 27, 2024
• shahjahan jewel ninja tables WordPress Ninja Tables plugin <= 5.0.5 - Broken Access Control vulnerability CVE-2024-23504 5.3 MediumJune 14, 2024
• shahjahan jewel ninja tables WordPress Ninja Tables plugin <= 5.0.6 - Broken Access Control vulnerability CVE-2024-23503 4.3 MediumJune 11, 2024
• shahjahan jewel ninja tables WordPress Ninja Tables plugin <= 5.0.9 - Server Side Request Forgery (SSRF) vulnerability CVE-2024-35635 4.4 MediumJune 3, 2024
• fluentforms contact form, techjewel fluent forms – customizable contact forms, survey, quiz, & conversational form builder +1 more Contact Form Plugin by Fluent Forms for Quiz, Survey, and Drag & Drop WP Form Builder <= 5.1.15 - PHP Object Injection via extractDynamicValues CVE-2024-4157 Public exploit 7.5 HighMay 22, 2024
• wp email newsletter team - fluentcrm fluent crm, wpmanageninja fluentcrm +1 more WordPress FluentCRM plugin <= 2.8.44 - Cross Site Scripting (XSS) vulnerability CVE-2024-30430 5.9 MediumMarch 29, 2024
• wpmanageninja pdf generator for fluent forms, fluent pdf generator +1 more PDF Generator For Fluent Forms <= 1.1.7 - Cross-Site Scripting CVE-2023-6953 4.9 MediumFebruary 5, 2024
• wpmanageninja fluent support, wpmanageninja llc fluent support – wordpress helpdesk and customer support ticket plugin +1 more WordPress Fluent Support Plugin <= 1.7.6 is vulnerable to SQL Injection CVE-2023-51547 7.6 HighDecember 31, 2023
• wpmanageninja fluentsmtp, techjewel fluentsmtp – wp smtp plugin with amazon ses, sendgrid, mailgun, postmark, google and any smtp provider +1 more FluentSMTP <= 2.2.4 - Unauthenticated Stored Cross-Site Scripting via Email Subject CVE-2023-3087 7.2 HighJuly 12, 2023
• wpmanageninja fluentcrm, techjewel fluentcrm – email newsletter, automation, email marketing, email campaigns, optins, leads, and crm solution +1 more FluentCRM - Marketing Automation For WordPress <= 2.8.01 - Insufficient Use of Hash as Authorization Control CVE-2023-1430 Public exploit 6.5 MediumJune 9, 2023
• wpmanageninja ninja tables, wpmanageninja llc ninja tables – best data table plugin for wordpress +1 more WordPress Ninja Tables Plugin <= 4.3.4 is vulnerable to Cross Site Request Forgery (CSRF) CVE-2022-47136 4.3 MediumMay 25, 2023
• shahjahan jewel ninja tables WordPress Ninja Tables Plugin <= 4.3.4 is vulnerable to Cross Site Scripting (XSS) CVE-2022-47137 5.9 MediumMay 10, 2023
• unknown fluentsmtp FluentSMTP < 2.2.3 - Stored XSS via Email Logs CVE-2023-0219 5.4 MediumMarch 13, 2023
• unknown fluentauth FluentAuth < 1.0.2 - Bypass blocks by IP Spoofing CVE-2022-4746 7.5 HighJanuary 23, 2023
• wpmanageninja fluent support, unknown fluent support – wordpress helpdesk and customer support ticket plugin +1 more Fluent Support < 1.5.8 - Admin+ SQLi CVE-2022-2559 7.2 HighAugust 29, 2022
• Show olderLoading…