Browse CVEs

HIGH 7.2 CVE-2025-2940 The Ninja Tables – Easy Data Table Builder plugin for WordPress is vulnerable to Server-Side Request Forgery in all versions up to, and including, 5.… Ninja Tables 5.0.19+ Fix from $1,9502025-06-27 MEDIUM 5.6 CVE-2025-2939 The Ninja Tables – Easy Data Table Builder plugin for WordPress is vulnerable to PHP Object Injection in all versions up to, and including, 5.0.18 vi… Ninja Tables 5.0.19+ Fix from $1,6002025-06-03 HIGH 7.5 CVE-2024-13568 The Fluent Support – Helpdesk & Customer Support Ticket System plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions u… Fluent Support 1.8.6+ Fix from $1,9502025-03-01 MEDIUM 5.4 CVE-2024-12772 The Ninja Tables WordPress plugin before 5.0.17 does not sanitize and escape a parameter before outputting it back in the page when importing a CSV,… Ninja Tables 5.0.17+ Fix from $1,6002025-01-31 CRITICAL 9.8 CVE-2024-47302 Missing Authorization vulnerability in Shahjahan Jewel Fluent Support fluent-support allows Exploiting Incorrectly Configured Access Control Security… Fluent Support 1.8.1+ Fix from $2,3002024-11-01 HIGH 8.5 CVE-2024-47304 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Shahjahan Jewel Fluent Support fluent-support a… Fluent Support 1.8.1+ Fix from $1,9502024-10-17 MEDIUM 5.4 CVE-2024-7304 The Ninja Tables – Easiest Data Table Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via SVG File uploads in all versions … Ninja Tables 5.0.13+ Fix from $1,6002024-08-27 MEDIUM 5.3 CVE-2024-23504 Missing Authorization vulnerability in WPManageNinja LLC Ninja Tables.This issue affects Ninja Tables: from n/a through 5.0.5. Ninja Tables 5.0.6+ Fix from $1,6002024-06-14 MEDIUM 5.4 CVE-2023-6953 The PDF Generator For Fluent Forms – The Contact Form Plugin plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the header, PDF bo… Pdf Generator For Fluent Forms 1.1.8+ Fix from $1,6002024-02-05 HIGH 7.2 CVE-2023-51547 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in WPManageNinja LLC Fluent Support – WordPress He… Fluent Support after 1.7.6 Fix from $1,9502023-12-31 MEDIUM 6.1 CVE-2023-3087 The FluentSMTP plugin for WordPress is vulnerable to Stored Cross-Site Scripting via an email subject in versions up to, and including, 2.2.4 due to … Fluentsmtp 2.2.5+ Fix from $1,6002023-07-12 MEDIUM 6.5 CVE-2023-1430 The FluentCRM - Marketing Automation For WordPress plugin for WordPress is vulnerable to unauthorized modification of data in versions up to, and in… Fluentcrm after 2.7.40 Fix from $1,6002023-06-09 HIGH 8.8 CVE-2022-47136 Cross-Site Request Forgery (CSRF) vulnerability in WPManageNinja LLC Ninja Tables – Best Data Table Plugin for WordPress plugin <= 4.3.4 versions. Ninja Tables after 4.3.4 Fix from $1,9502023-05-25 MEDIUM 5.4 CVE-2023-0219 The FluentSMTP WordPress plugin before 2.2.3 does not sanitize or escape email content, making it vulnerable to stored cross-site scripting attacks (… Fluentsmtp 2.2.3+ Fix from $1,6002023-03-13 HIGH 7.5 CVE-2022-4746 The FluentAuth WordPress plugin before 1.0.2 prioritizes getting a visitor's IP address from certain HTTP headers over PHP's REMOTE_ADDR, which makes… Fluentauth 1.0.2+ Fix from $1,9502023-01-23 HIGH 7.2 CVE-2022-2559 The Fluent Support WordPress plugin before 1.5.8 does not properly sanitise, validate and escape various parameters before using them in an SQL state… Fluent Support 1.5.8+ Fix from $1,9502022-08-29 HIGH 7.5 CVE-2022-2544 The Ninja Job Board WordPress plugin before 1.3.3 does not protect the directory where it stores uploaded resumes, making it vulnerable to unauthenti… Ninja Job Board 1.3.3+ Fix from $1,9502022-08-22 MEDIUM 5.4 CVE-2021-24528 The FluentSMTP WordPress plugin before 2.0.1 does not sanitize parameters before storing the settings in the database, nor does the plugin escape the… Fluentsmtp 2.0.1+ Fix from $1,6002021-08-30