Login Request a demo
NI
Vendor
ninjateam
24 products with CVEs on record
65
CVEs
0
On KEV
0
New 30D
Products
FI
Filebird
Ninjateam
9.8
8 CVEs0 on KEV0 new
FW
FileBird – WordPress Media Library Folders & File Manager
ninjateam
6.5
7 CVEs0 on KEV0 new
FI
Filester
Ninjateam
8.8
7 CVEs0 on KEV0 new
FM
File Manager Pro – Filester
ninjateam
8.8
6 CVEs0 on KEV0 new
WC
WP Chat App
ninjateam
5.4
6 CVEs0 on KEV0 new
GC
GDPR CCPA Compliance & Cookie Consent Banner
ninjateam
9.8
3 CVEs0 on KEV0 new
WD
WP Duplicate Page
ninjateam
5.4
3 CVEs0 on KEV0 new
CT
Click TO Chat
Ninjateam
5.4
2 CVEs0 on KEV0 new
FA
Fastdup
Ninjateam
7.5
2 CVEs0 on KEV0 new
FF
FastDup – Fastest WordPress Migration & Duplicator
ninjateam
8.8
2 CVEs0 on KEV0 new
FP
Filemanager Pro-filester
Ninjateam
8.8
2 CVEs0 on KEV0 new
HF
Header Footer Custom Code
Ninjateam
4.8
2 CVEs0 on KEV0 new
NN
Notibar – Notification Bar for WordPress
ninjateam
6.3
2 CVEs0 on KEV0 new
VD
Video Downloader For Tiktok
Ninjateam
9.8
2 CVEs0 on KEV0 new
WT
WP Telegram Chat Widget
ninjateam
6.4
2 CVEs0 on KEV0 new
CF
Chat For Telegram
Ninjateam
5.4
1 CVEs0 on KEV0 new
DF
Database for Contact Form 7
NinjaTeam
7.1
1 CVEs0 on KEV0 new
FD
Filebird Document Library
Ninjateam
5.3
1 CVEs0 on KEV0 new
FP
FileBird Pro
NinjaTeam
5.4
1 CVEs0 on KEV0 new
GC
Gpdr Ccpa Compliance Support
Ninjateam
9.8
1 CVEs0 on KEV0 new
LC
Live Chat with Facebook Messenger
ninjateam
5.4
1 CVEs0 on KEV0 new
MS
Multi Step For Contact Form
Ninjateam
9.8
1 CVEs0 on KEV0 new
MS
Multi Step For Contact Form 7
Ninjateam
9.8
1 CVEs0 on KEV0 new
WC
WP Click to Chat – Email, Live Chat, Call & Book Now Buttons
ninjateam
5.4
1 CVEs0 on KEV0 new
Recent CVEs
CVEProductCVSSEPSSPublishedSummary
CVE-2026-15004
FW
FileBird – WordPress Media Library Folders & File Manager
ninjateam
5.4
0%
Sep 18FileBird – WordPress Media Library Folders & File Manager <= 6.5.6 - Authenticated (Author+) Stored Cross-Site Scripting
CVE-2026-1104
FF
FastDup – Fastest WordPress Migration & Duplicator
ninjateam
8.8
0%
Feb 12FastDup – Fastest WordPress Migration & Duplicator <= 2.7.1 - Missing Authorization to Authenticated (Contributor+) Backup Creation and Download
CVE-2025-14001
WD
WP Duplicate Page
ninjateam
5.4
0%
Jan 13WP Duplicate Page <= 1.8 - Missing Authorization to Authenticated (Contributor+) Arbitrary Post Duplication
CVE-2026-0604
FF
FastDup – Fastest WordPress Migration & Duplicator
ninjateam
6.5
0%
Jan 6FastDup <= 2.7 - Authenticated (Contributor+) Path Traversal via 'dir_path' REST Parameter
CVE-2025-66134
FP
FileBird Pro
NinjaTeam
5.4
0%
Dec 16WordPress FileBird Pro plugin <= 6.5.1 - Broken Access Control vulnerability
CVE-2025-12900
FW
FileBird – WordPress Media Library Folders & File Manager
ninjateam
4.3
0%
Dec 15FileBird – WordPress Media Library Folders & File Manager <= 6.5.1 - Missing Authorization to Authenticated (Author+) Global Folders Tampering
CVE-2025-12481
WD
WP Duplicate Page
ninjateam
4.3
0%
Nov 18WP Duplicate Page <= 1.7 - Missing Authorization to Authenticated (Contributor+) Sensitive Information Disclosure
CVE-2025-11510
FW
FileBird – WordPress Media Library Folders & File Manager
ninjateam
4.3
0%
Oct 18FileBird <= 6.4.9 - Improper Authorization to Authenticated (Author+) Settings Reset
CVE-2025-0818
FM
File Manager Pro – Filester
ninjateam
6.5
1%
Aug 13Multiple elFinder Plugins <= (Various Versions) - Directory Traversal to Arbitrary File Deletion
CVE-2025-6986
FW
FileBird – WordPress Media Library Folders & File Manager
ninjateam
6.5
0%
Aug 6FileBird – WordPress Media Library Folders & File Manager <= 6.4.8 - Authenticated (Author+) SQL Injection
CVE-2025-3234
FM
File Manager Pro – Filester
ninjateam
7.2
1%
Jun 14File Manager Pro – Filester <= 1.8.8 - Authenticated (Administrator+) Arbitrary File Upload
CVE-2025-5236
WT
WP Telegram Chat Widget
ninjateam
5.4
0%
May 30NinjaTeam Chat for Telegram <= 1.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via username Parameter
CVE-2025-1672
NN
Notibar – Notification Bar for WordPress
ninjateam
5.5
0%
Mar 6Notibar <= 2.1.5 - Authenticated (Administrator+) Stored Cross-Site Scripting
CVE-2025-26977
FI
Filebird
Ninjateam
7.2
0%
Feb 25WordPress FileBird plugin <= 6.4.2.1 - Insecure Direct Object References (IDOR) vulnerability
CVE-2025-24591
GC
Gdpr Ccpa Compliance & Cookie Consent Banner
Ninjateam
8.8
0%
Jan 24WordPress GDPR CCPA Compliance & Cookie Consent Banner plugin <= 2.7.1 - Broken Access Control vulnerability
CVE-2024-11885
WT
WP Telegram Chat Widget
ninjateam
6.4
0%
Dec 24NinjaTeam Chat for Telegram <= 1.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
CVE-2024-12331
FM
File Manager Pro – Filester
ninjateam
4.3
0%
Dec 19File Manager Pro – Filester <= 1.8.6 - Missing Authorization to Authenticated (Subscriber+) Filebird Plugin Installation
CVE-2024-11012
NN
Notibar – Notification Bar for WordPress
ninjateam
6.3
0%
Dec 13Notibar – Notification Bar for WordPress <= 2.1.4 - Authenticated (Subscriber+) Arbitrary Shortcode Execution via njt_nofi_text
CVE-2023-25966
FI
Filebird
Ninjateam
6.5
1%
Dec 9WordPress FileBird plugin <= 5.1.4 - Broken Access Control vulnerability
CVE-2024-53825
FI
Filebird
Ninjateam
7.2
0%
Dec 6WordPress FileBird Lite plugin <= 6.3.2 - Broken Access Control vulnerability
CVE-2024-9669
FM
File Manager Pro – Filester
ninjateam
7.2
1%
Nov 28File Manager Pro – Filester <= 1.8.5 - Authenticated (Administrator+) Local JavaScript File Inclusion
CVE-2024-8066
FM
File Manager Pro – Filester
ninjateam
8.8
1%
Nov 28File Manager Pro – Filester <= 1.8.6- Authenticated (Subscriber+) Arbitrary File Upload
CVE-2024-10533
WC
WP Chat App
ninjateam
4.3
0%
Nov 16WP Chat App <= 3.6.8 - Missing Authorization to Authenticated (Subscriber+) Filebird Plugin Installation
CVE-2024-10055
WC
WP Click to Chat – Email, Live Chat, Call & Book Now Buttons
ninjateam
5.4
0%
Oct 18Click to Chat – WP Support All-in-One Floating Widget <= 2.3.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via wpsaio_snapchat Shortcode
CVE-2024-49281
CT
Click TO Chat
Ninjateam
5.4
1%
Oct 17WordPress Click to Chat – WP Support All-in-One Floating Widget plugin <= 2.3.3 - Cross Site Scripting (XSS) vulnerability
CVE-2024-47331
MS
Multi Step For Contact Form 7
Ninjateam
9.8
1%
Oct 11WordPress Multi Step for Contact Form plugin <= 2.7.7 - Unauthenticated SQL Injection vulnerability
CVE-2024-6617
HF
Header Footer Custom Code
Ninjateam
4.8
0%
Sep 13NinjaTeam Header Footer Custom Code <= 1.2 - Admin+ Stored XSS via CSS Styles
CVE-2024-6493
HF
Header Footer Custom Code
Ninjateam
4.8
0%
Sep 13NinjaTeam Header Footer Custom Code < 1.2 - Admin+ Stored XSS
CVE-2024-7031
FM
File Manager Pro – Filester
ninjateam
8.8
1%
Aug 3File Manager Pro – Filester <= 1.8.2 - Authenticated Plugin Settings Update
CVE-2024-37504
FD
Filebird Document Library
Ninjateam
5.3
0%
Jul 10WordPress FileBird Document Library plugin <= 2.0.6 - Sensitive Data Exposure vulnerability
CVE-2024-4664
WC
WP Chat App
Ninjateam
4.8
0%
Jun 27WP Chat App < 3.6.5 - Admin+ Stored XSS
CVE-2024-5607
GC
GDPR CCPA Compliance & Cookie Consent Banner
ninjateam
5.4
0%
Jun 7GDPR CCPA Compliance & Cookie Consent Banner <= 2.7.0 - Missing Authorization to Settings Update and Stored Cross-Site Scripting
CVE-2024-35166
FI
Filebird
Ninjateam
7.5
1%
May 13WordPress FileBird – WordPress Media Library Folders & File Manager plugin <= 5.6.3 - Sensitive Data Exposure vulnerability
CVE-2024-2346
FW
FileBird – WordPress Media Library Folders & File Manager
ninjateam
5.4
0%
May 2FileBird – WordPress Media Library Folders & File Manager <= 5.6.3 - Authenticated (Author+) Insecure Direct Object Reference
CVE-2024-2345
FW
FileBird – WordPress Media Library Folders & File Manager
ninjateam
5.4
0%
May 2FileBird – WordPress Media Library Folders & File Manager <= 5.6.3 - Authenticated (Author+) Stored Cross-Site Scripting
CVE-2024-2837
WC
WP Chat App
Ninjateam
5.4
1%
Apr 26WP Chat App < 3.6.4 - Admin+ Stored XSS
CVE-2024-2513
WC
WP Chat App
ninjateam
5.4
0%
Apr 9WP Chat App <= 3.6.2 - Authenticated(Contributor+) Stored Cross-Site Scripting via Block Image Attribute
CVE-2024-29103
DF
Database for Contact Form 7
NinjaTeam
7.1
0%
Mar 19WordPress Database for Contact Form 7 plugin <= 3.0.6 - Unauthenticated Cross Site Scripting (XSS) vulnerability
CVE-2024-1761
WC
WP Chat App
ninjateam
5.4
0%
Mar 7WP Chat App <= 3.6.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via Block Attributes
CVE-2023-51370
WC
WP Chat App
NinjaTeam
4.8
0%
Feb 12WordPress WP Chat App Plugin <= 3.4.4 is vulnerable to Cross Site Scripting (XSS)
CVE-2024-0691
FW
FileBird – WordPress Media Library Folders & File Manager
ninjateam
4.8
0%
Feb 5FileBird <= 5.6.0 - Authenticated(Administrator+) Stored Cross-Site Scripting via Folder Import
CVE-2023-6592
FA
Fastdup
Ninjateam
5.3
1%
Jan 16FastDup – Fastest WordPress Migration & Duplicator < 2.2 - Directory Listing to Account Takeover and Sensitive Data Exposure
CVE-2023-51406
FA
Fastdup
Ninjateam
7.5
0%
Jan 8WordPress FastDup Plugin <= 2.1.7 is vulnerable to Sensitive Data Exposure
CVE-2023-5740
LC
Live Chat with Facebook Messenger
ninjateam
5.4
1%
Oct 24Live Chat with Facebook Messenger <= 1.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
CVE-2023-4861
FI
Filester
Ninjateam
7.2
2%
Oct 16File Manager Pro < 1.8.1 - Admin+ Remote Code Execution
CVE-2023-4862
FI
Filester
Ninjateam
4.8
0%
Oct 16File Manager Pro < 1.8.1 - Admin+ Stored Cross-Site Scripting
CVE-2023-4827
FI
Filester
Ninjateam
8.8
8%
Oct 16File Manager Pro < 1.8 - Remote Code Execution via CSRF
CVE-2020-36718
GC
GDPR CCPA Compliance & Cookie Consent Banner
ninjateam
9.8
2%
Jun 7GDPR CCPA Compliance Support <= 2.3 - PHP Object Injection
CVE-2022-2093
WD
WP Duplicate Page
Ninjateam
4.8
1%
Jul 11The WP Duplicate Page WordPress plugin before 1.3 does not sanitize and escape some of its settings, which could allow high privilege users such as admin to perform Cross-Site…
CVE-2021-24385
FI
Filebird
Ninjateam
9.8
3%
Jul 12The Filebird Plugin 4.7.3 introduced a SQL injection vulnerability as it is making SQL queries without escaping user input data from a HTTP post request
CVE-2020-24143
VD
Video Downloader For Tiktok
Ninjateam
7.5
2%
Jul 7Directory traversal in the Video Downloader for TikTok (aka downloader-tiktok) plugin 1.3 for WordPress lets an attacker get access to files that are stored outside the web root…
CVE-2020-24142
VD
Video Downloader For Tiktok
Ninjateam
9.8
2%
Jul 7Server-side request forgery in the Video Downloader for TikTok (aka downloader-tiktok) plugin 1.3 for WordPress lets an attacker send crafted requests from the back-end server of…