Ninja Team vulnerabilities and threats

13 threats

Severity	CVSS	Signals	Threat	Source	Published
Critical	9.6	EPSS 0.4%	CVE-2026-52703FastDup (WordPress plugin) · Path Traversal: '.../...// Critical9.6EPSS 0.4%2026-06-15CVE Database V5CVE-2026-52703 Unauthenticated Path Traversal in FastDup <= 2.7.2 versions. EPSS 0.4%Vulnerability Ninja Team CWE-35	CVE Database V5	2026-06-15
Medium	6.5	EPSS 0.3%	CVE-2025-68073GDPR CCPA Compliance Support (WordPress plugin) · Missing Authorization Medium6.5EPSS 0.3%2026-01-22CVE Database V5CVE-2025-68073 Missing Authorization vulnerability in Ninja Team GDPR CCPA Compliance Support ninja-gdpr-compliance allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects GDPR CCPA Compliance Support: from n/a through <= 2.7.4. EPSS 0.3%Vulnerability Ninja Team	CVE Database V5	2026-01-22
Medium	5.9	EPSS 0.2%	CVE-2025-52710File Manager Pro (WordPress plugin) · Cross-site Scripting Medium5.9EPSS 0.2%2025-06-20CVE Database V5CVE-2025-52710 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Ninja Team File Manager Pro filester allows Stored XSS.This issue affects File Manager Pro: from n/a through <= 1.8.8. EPSS 0.2%Vulnerability Ninja Team	CVE Database V5	2025-06-20
Medium	6.5	EPSS 0.2%	CVE-2025-31092Click to Chat (WordPress plugin) · Cross-site Scripting Medium6.5EPSS 0.2%2025-03-27CVE Database V5CVE-2025-31092 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Ninja Team Click to Chat – WP Support All-in-One Floating Widget support-chat allows Stored XSS.This issue affects Click to Chat – WP Support All-in-One Floating Widget: from n/a through <= 2.3.4. EPSS 0.2%Vulnerability Ninja Team	CVE Database V5	2025-03-27
Low	3.8	EPSS 0.4%	CVE-2025-26977Filebird (WordPress plugin) · Insecure Direct Object Reference Low3.8EPSS 0.4%2025-02-25CVE Database V5CVE-2025-26977 Authorization Bypass Through User-Controlled Key vulnerability in Ninja Team Filebird filebird allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Filebird: from n/a through <= 6.4.2.1. EPSS 0.4%Vulnerability Ninja Team	CVE Database V5	2025-02-25
Medium	4.3	EPSS 0.5%	CVE-2025-24591GDPR CCPA Compliance Support (WordPress plugin) · Missing Authorization Medium4.3EPSS 0.5%2025-01-24CVE Database V5CVE-2025-24591 Missing Authorization vulnerability in Ninja Team GDPR CCPA Compliance Support ninja-gdpr-compliance allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects GDPR CCPA Compliance Support: from n/a through <= 2.7.1. EPSS 0.5%Vulnerability Ninja Team	CVE Database V5	2025-01-24
Medium	4.3	EPSS 0.3%	CVE-2024-54269Notibar (WordPress plugin) · Missing Authorization Medium4.3EPSS 0.3%2024-12-11CVE Database V5CVE-2024-54269 Missing Authorization vulnerability in Ninja Team Notibar notibar allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Notibar: from n/a through <= 2.1.4. EPSS 0.3%Vulnerability Ninja Team	CVE Database V5	2024-12-11
Medium	4.7	EPSS 0.4%	CVE-2024-53825Filebird (WordPress plugin) · Missing Authorization Medium4.7EPSS 0.4%2024-12-06CVE Database V5CVE-2024-53825 Missing Authorization vulnerability in Ninja Team Filebird filebird allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Filebird: from n/a through <= 6.3.2. EPSS 0.4%Vulnerability Ninja Team	CVE Database V5	2024-12-06
Medium	6.5	EPSS 0.5%	CVE-2024-49281Click to Chat (WordPress plugin) · OS Command Injection Medium6.5EPSS 0.5%2024-10-17CVE Database V5CVE-2024-49281 Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability in Ninja Team Click to Chat – WP Support All-in-One Floating Widget support-chat allows Stored XSS.This issue affects Click to Chat – WP Support All-in-One Floating Widget: from n/a through <= 2.3.3. EPSS 0.5%Vulnerability Ninja Team	CVE Database V5	2024-10-17
Critical	9.3	EPSS 0.6%	CVE-2024-47331Multi Step for Contact Form (WordPress plugin) · SQL Injection Critical9.3EPSS 0.6%2024-10-11CVE Database V5CVE-2024-47331 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Ninja Team Multi Step for Contact Form cf7-multi-step allows SQL Injection.This issue affects Multi Step for Contact Form: from n/a through <= 2.7.7. EPSS 0.6%Vulnerability Ninja Team	CVE Database V5	2024-10-11
Medium	6.5	EPSS 0.2%	CVE-2024-37244Ninja Beaver Add-ons for Beaver Builder (WordPress plugin) · XSS or 'Cross-site Scripting' Medium6.5EPSS 0.2%2024-07-22CVE Database V5CVE-2024-37244 Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Ninja Team Ninja Beaver Add-ons for Beaver Builder allows Stored XSS.This issue affects Ninja Beaver Add-ons for Beaver Builder: from n/a through 2.4.5. EPSS 0.2%Vulnerability Ninja Team CWE-79	CVE Database V5	2024-07-22
Medium	5.3	EPSS 0.4%	CVE-2024-37504FileBird Document Library (WordPress plugin) · Information Exposure Medium5.3EPSS 0.4%2024-07-10CVE Database V5CVE-2024-37504 Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Ninja Team FileBird Document Library.This issue affects FileBird Document Library: from n/a through 2.0.6. EPSS 0.4%Vulnerability Ninja Team CWE-200	CVE Database V5	2024-07-10
Medium	5.3	EPSS 0.6%	CVE-2024-35166Filebird (WordPress plugin) · Information Exposure Medium5.3EPSS 0.6%2024-05-13CVE Database V5CVE-2024-35166 Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Ninja Team Filebird.This issue affects Filebird: from n/a through 5.6.3. EPSS 0.6%Vulnerability Ninja Team CWE-200	CVE Database V5	2024-05-13

Page 1 of 1