Threat database

29 threats

Threat database
Severity	CVSS	Signals	Threat	Source	Published
High	7.1	EPSS 0.3%	CVE-2026-57715Fluent CRM · Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in WPManageNinja… High7.1EPSS 0.3%2026-07-13CVE Database V5CVE-2026-57715 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in WPManageNinja Fluent CRM fluent-crm allows Reflected XSS.This issue affects Fluent CRM: from n/a through <= 3.1.7. EPSS 0.3%Vulnerability WPManageNinja #cwe-79	CVE Database V5	2026-07-13
Medium	5.4	EPSS 0.3%	CVE-2026-5069Fluent Forms – Customizable Contact Forms, Survey, Quiz, & Conversational Form Builder · Incorrect Authorization Medium5.4EPSS 0.3%2026-07-10CVE Database V5CVE-2026-5069 The Fluent Forms plugin for WordPress is vulnerable to incorrect authorization via the 'subscription_id' parameter in versions up to, and including, 6.2.1. This is due to insufficient ownership authorization checks in the payment cancellation AJAX flow. This makes it possible for authenticated attackers, with subscriber-level access and above, to submit cancellation requests for other users' subscriptions. EPSS 0.3%Vulnerability wpmanageninja #cwe-863	CVE Database V5	2026-07-10
Medium	6.5	EPSS 0.2%	CVE-2026-57638Fluent Booking · Cross-site Scripting Medium6.5EPSS 0.2%2026-06-26CVE Database V5CVE-2026-57638 Contributor Cross Site Scripting (XSS) in Fluent Booking <= 2.1.0 versions. EPSS 0.2%Vulnerability WPManageNinja LLC #cwe-79	CVE Database V5	2026-06-26
High	7.5	EPSS 0.3%	CVE-2026-42655Best Payments Plugin for WP · External Control of Assumed-Immutable Web Parameter High7.5EPSS 0.3%2026-06-15CVE Database V5CVE-2026-42655 Unauthenticated Bypass Vulnerability in Best Payments Plugin for WP <= 4.6.19 versions. EPSS 0.3%Vulnerability WPManageNinja #cwe-472	CVE Database V5	2026-06-15
High	7.1	EPSS 0.3%	CVE-2025-67971FluentCart · Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in WPManageNinja… High7.1EPSS 0.3%2026-02-20CVE Database V5CVE-2025-67971 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in WPManageNinja FluentCart fluent-cart allows Reflected XSS.This issue affects FluentCart: from n/a through < 1.3.0. EPSS 0.3%Vulnerability WPManageNinja	CVE Database V5	2026-02-20
Medium	4.9	EPSS 0.3%	CVE-2025-13495FluentCart A New Era of eCommerce – Faster, Lighter, and Simpler · SQL Injection Medium4.9EPSS 0.3%2025-12-03CVE Database V5CVE-2025-13495 The FluentCart plugin for WordPress is vulnerable to SQL Injection via the 'groupKey' parameter in all versions up to, and including, 1.3.1. This is due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. This makes it possible for authenticated attackers, with Administrator-level access and above, to append additional SQL queries into already existing queries that can be used to extract sensitive information from the database. EPSS 0.3%Vulnerability wpmanageninja #cwe-89	CVE Database V5	2025-12-03
Medium	5.3	EPSS 0.3%	CVE-2024-23504Ninja Tables · Missing Authorization Medium5.3EPSS 0.3%2024-06-14CVE Database V5CVE-2024-23504 Missing Authorization vulnerability in WPManageNinja LLC Ninja Tables.This issue affects Ninja Tables: from n/a through 5.0.5. EPSS 0.3%Vulnerability WPManageNinja LLC #cwe-862	CVE Database V5	2024-06-14
Medium	4.3	EPSS 0.3%	CVE-2024-23503Ninja Tables · Missing Authorization Medium4.3EPSS 0.3%2024-06-11CVE Database V5CVE-2024-23503 Missing Authorization vulnerability in WPManageNinja LLC Ninja Tables.This issue affects Ninja Tables: from n/a through 5.0.6. EPSS 0.3%Vulnerability WPManageNinja LLC #cwe-862	CVE Database V5	2024-06-11
Medium	4.4	EPSS 0.2%	CVE-2024-35635Ninja Tables · Server-Side Request Forgery (SSRF) Medium4.4EPSS 0.2%2024-06-03CVE Database V5CVE-2024-35635 Server-Side Request Forgery (SSRF) vulnerability in WPManageNinja LLC Ninja Tables.This issue affects Ninja Tables: from n/a through 5.0.9. EPSS 0.2%Vulnerability WPManageNinja LLC #cwe-918	CVE Database V5	2024-06-03

Showing 21–29 of 29 results