Login Request a demo
WP
Vendor
WPManageNinja
19 products with CVEs on record
50
CVEs
0
On KEV
6
New 30D
Products
FF
Fluent Forms – Customizable Contact Forms, Survey, Quiz, & Conversational Form Builder
wpmanageninja
7.2
7 CVEs0 on KEV2 new
FA
FluentCart A New Era of eCommerce – Faster, Lighter, and Simpler
wpmanageninja
7.5
3 CVEs0 on KEV2 new
BP
Best Payments Plugin for WP
WPManageNinja
7.1
2 CVEs0 on KEV1 new
FL
FluentCart
WPManageNinja
7.5
2 CVEs0 on KEV1 new
NT
Ninja Tables
WPManageNinja
8.8
12 CVEs0 on KEV0 new
FS
Fluent Support
WPManageNinja
9.8
7 CVEs0 on KEV0 new
FL
Fluentsmtp
Wpmanageninja
9.8
4 CVEs0 on KEV0 new
FL
Fluentcrm
Wpmanageninja
6.5
2 CVEs0 on KEV0 new
CF
Contact Form
Wpmanageninja
8.8
1 CVEs0 on KEV0 new
FC
Fluent CRM
WPManageNinja
7.1
1 CVEs0 on KEV0 new
FF
Fluent Forms Pro
WPManageNinja
9.8
1 CVEs0 on KEV0 new
FF
Fluent Forms Pro Add On Pack
WPManageNinja
7.1
1 CVEs0 on KEV0 new
FS
Fluent Support – Helpdesk & Customer Support Ticket System
wpmanageninja
6.4
1 CVEs0 on KEV0 new
FL
Fluentauth
Wpmanageninja
7.5
1 CVEs0 on KEV0 new
FL
FluentCommunity
WPManageNinja
6.5
1 CVEs0 on KEV0 new
FW
FluentSMTP – WP SMTP Plugin with Amazon SES, SendGrid, Mailgun, Postmark, Cloudflare, toSend, Gmail and Any SMTP
wpmanageninja
7.2
1 CVEs0 on KEV0 new
NJ
Ninja Job Board
Wpmanageninja
7.5
1 CVEs0 on KEV0 new
NT
Ninja Tables Pro
WPManageNinja
9.8
1 CVEs0 on KEV0 new
PG
Pdf Generator For Fluent Forms
Wpmanageninja
5.4
1 CVEs0 on KEV0 new
Recent CVEs
CVEProductCVSSEPSSPublishedSummary
CVE-2026-103525
FA
FluentCart A New Era of eCommerce – Faster, Lighter, and Simpler
wpmanageninja
7.5
0%
Oct 16FluentCart A New Era of eCommerce <= 1.7.0 - Insecure Direct Object Reference to Unauthenticated Sensitive Information Disclosure via 'order_id' and 'billing_address_id' Parameters
CVE-2026-103518
FA
FluentCart A New Era of eCommerce – Faster, Lighter, and Simpler
wpmanageninja
4.9
0%
Oct 16FluentCart A New Era of eCommerce <= 1.7.0 - Authenticated (Administrator+) SQL Injection via 'products.variants' Array Keys
CVE-2026-109695
FL
FluentCart
WPManageNinja
7.5
0%
Oct 15WordPress FluentCart plugin <= 1.7.1 - Sensitive Data Exposure vulnerability
CVE-2026-108484
BP
Best Payments Plugin for WP
WPManageNinja
7.1
0%
Oct 14WordPress Best Payments Plugin for WP plugin <= 4.6.27 - Cross Site Scripting (XSS) vulnerability
CVE-2026-15178
FF
Fluent Forms – Customizable Contact Forms, Survey, Quiz, & Conversational Form Builder
wpmanageninja
5.4
0%
Oct 10Fluent Forms <= 6.2.5 - Missing Authorization to Authenticated (Custom+) Sensitive Data Exposure and Modification
CVE-2026-101324
FF
Fluent Forms – Customizable Contact Forms, Survey, Quiz, & Conversational Form Builder
wpmanageninja
4.7
0%
Oct 10Fluent Forms <= 6.2.14 - Reflected Cross-Site Scripting via '{get.*}' Editor SmartCode Parameter
CVE-2026-94679
FS
Fluent Support
WPManageNinja
5.4
0%
Sep 23WordPress Fluent Support plugin <= 2.3.2 - Broken Access Control vulnerability
CVE-2026-66633
FF
Fluent Forms Pro Add On Pack
WPManageNinja
7.1
0%
Aug 18WordPress Fluent Forms Pro Add On Pack plugin < 6.2.12 - Cross Site Scripting (XSS) vulnerability
CVE-2026-73532
FF
Fluent Forms Pro
WPManageNinja
9.8
1%
Aug 13Fluent Forms Pro 6.2.7 Embedded Malicious Code via Tampered Plugin Build
CVE-2026-73533
NT
Ninja Tables Pro
WPManageNinja
9.8
1%
Aug 13Ninja Tables Pro 5.2.11 Embedded Malicious Code via Tampered Plugin Build
CVE-2026-66467
FL
FluentCommunity
WPManageNinja
6.5
0%
Aug 13WordPress FluentCommunity plugin <= 2.7.5 - Cross Site Scripting (XSS) vulnerability
CVE-2026-18146
FF
Fluent Forms – Customizable Contact Forms, Survey, Quiz, & Conversational Form Builder
wpmanageninja
7.2
0%
Aug 13Fluent Forms <= 6.2.11 - Unauthenticated Stored Cross-Site Scripting via Notification Smartcode Values
CVE-2026-61964
NT
Ninja Tables
WPManageNinja
7.1
0%
Aug 6WordPress Ninja Tables plugin <= 5.2.9 - Cross Site Scripting (XSS) vulnerability
CVE-2026-16636
FW
FluentSMTP – WP SMTP Plugin with Amazon SES, SendGrid, Mailgun, Postmark, Cloudflare, toSend, Gmail and Any SMTP
wpmanageninja
7.2
1%
Aug 6FluentSMTP <= 2.2.95 - Unauthenticated Stored Cross-Site Scripting via Recipient Display Name (to.name) in Email Logs
CVE-2026-17571
FF
Fluent Forms – Customizable Contact Forms, Survey, Quiz, & Conversational Form Builder
wpmanageninja
6.1
0%
Aug 1Fluent Forms <= 6.2.8 - Reflected Cross-Site Scripting via 'param'
CVE-2026-17567
FF
Fluent Forms – Customizable Contact Forms, Survey, Quiz, & Conversational Form Builder
wpmanageninja
5.3
1%
Jul 31Fluent Forms <= 6.2.8 - Unauthenticated Sensitive Information Exposure via Insecure Direct Object Reference and Weak Transaction Hash in 'transaction' Parameter
CVE-2026-16655
FF
Fluent Forms – Customizable Contact Forms, Survey, Quiz, & Conversational Form Builder
wpmanageninja
7.2
1%
Jul 29Fluent Forms <= 6.2.7 - Unauthenticated Stored Cross-Site Scripting via Name Field Nested `password` Member
CVE-2026-15665
FS
Fluent Support – Helpdesk & Customer Support Ticket System
wpmanageninja
6.4
0%
Jul 24Fluent Support <= 2.3.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'redirect-to' Shortcode Attribute
CVE-2026-65474
NT
Ninja Tables
WPManageNinja
5.3
0%
Jul 23WordPress Ninja Tables plugin <= 5.2.10 - Sensitive Data Exposure vulnerability
CVE-2026-65470
FS
Fluent Support
WPManageNinja
6.5
0%
Jul 23WordPress Fluent Support plugin <= 2.3.0 - Cross Site Scripting (XSS) vulnerability
CVE-2026-57715
FC
Fluent CRM
WPManageNinja
7.1
0%
Jul 13WordPress Fluent CRM plugin <= 3.1.7 - Cross Site Scripting (XSS) vulnerability
CVE-2026-5069
FF
Fluent Forms – Customizable Contact Forms, Survey, Quiz, & Conversational Form Builder
wpmanageninja
5.4
0%
Jul 10Fluent Forms <= 6.2.1 - Incorrect Authorization to Authenticated (Subscriber+) Arbitrary Subscription Cancellation via 'subscription_id'
CVE-2026-42655
BP
Best Payments Plugin for WP
WPManageNinja
5.9
0%
Jun 15WordPress Best Payments Plugin for WP plugin <= 4.6.19 - Payment Bypass vulnerability
CVE-2025-67971
FL
FluentCart
WPManageNinja
7.1
0%
Feb 20WordPress FluentCart plugin < 1.3.0 - Cross Site Scripting (XSS) vulnerability
CVE-2025-13495
FA
FluentCart A New Era of eCommerce – Faster, Lighter, and Simpler
wpmanageninja
4.9
0%
Dec 3FluentCart A New Era of eCommerce <= 1.3.1 - Authenticated (Administrator+) SQL Injection via 'groupKey' Parameter
CVE-2025-2940
NT
Ninja Tables
Wpmanageninja
7.2
0%
Jun 27Ninja Tables – Easy Data Table Builder <= 5.0.18 - Unauthenticated Server-Side Request Forgery
CVE-2025-2939
NT
Ninja Tables
Wpmanageninja
5.6
0%
Jun 3Ninja Tables – Easy Data Table Builder <= 5.0.18 - Unauthenticated PHP Object Injection to Limited Remote Code Execution
CVE-2024-13568
FS
Fluent Support
Wpmanageninja
7.5
0%
Mar 1Fluent Support – Helpdesk & Customer Support Ticket System <= 1.8.5 - Unauthenticated Sensitive Information Exposure Through Unprotected Directory
CVE-2024-12772
NT
Ninja Tables
Wpmanageninja
5.4
0%
Jan 31Ninja Tables < 5.0.17 - Admin+ Stored XSS
CVE-2024-9511
FL
Fluentsmtp
Wpmanageninja
9.8
1%
Nov 23FluentSMTP – WP SMTP Plugin with Amazon SES, SendGrid, MailGun, Postmark, Google and Any SMTP Provider <= 2.2.82 - Unauthenticated PHP Object Injection
CVE-2024-47302
FS
Fluent Support
Wpmanageninja
9.8
0%
Nov 1WordPress Fluent Support plugin <= 1.8.0 - Broken Access Control on Email Verification vulnerability
CVE-2024-47304
FS
Fluent Support
Wpmanageninja
8.5
0%
Oct 17WordPress Fluent Support plugin <= 1.8.0 - SQL Injection vulnerability
CVE-2024-7304
NT
Ninja Tables
Wpmanageninja
5.4
0%
Aug 27Ninja Tables – Easiest Data Table Builder <= 5.0.12 - Authenticated (Author+) Stored Cross-Site Scripting via SVG File Upload
CVE-2024-23504
NT
Ninja Tables
Wpmanageninja
5.3
0%
Jun 14WordPress Ninja Tables plugin <= 5.0.5 - Broken Access Control vulnerability
CVE-2024-23503
NT
Ninja Tables
Wpmanageninja
4.3
0%
Jun 11WordPress Ninja Tables plugin <= 5.0.6 - Broken Access Control vulnerability
CVE-2024-35635
NT
Ninja Tables
Wpmanageninja
4.9
0%
Jun 3WordPress Ninja Tables plugin <= 5.0.9 - Server Side Request Forgery (SSRF) vulnerability
CVE-2024-4157
CF
Contact Form
Wpmanageninja
8.8
1%
May 22Contact Form Plugin by Fluent Forms for Quiz, Survey, and Drag & Drop WP Form Builder <= 5.1.15 - PHP Object Injection via extractDynamicValues
CVE-2024-30430
FL
Fluentcrm
Wpmanageninja
4.8
0%
Mar 29Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in WP Email Newsletter Team - FluentCRM Fluent CRM allows Stored XSS.This issue…
CVE-2023-6953
PG
Pdf Generator For Fluent Forms
Wpmanageninja
5.4
0%
Feb 5The PDF Generator For Fluent Forms – The Contact Form Plugin plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the header, PDF body and footer content…
CVE-2023-51547
FS
Fluent Support
Wpmanageninja
7.2
1%
Dec 31Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in WPManageNinja LLC Fluent Support – WordPress Helpdesk and Customer Support…
CVE-2023-3087
FL
Fluentsmtp
Wpmanageninja
6.1
1%
Jul 12The FluentSMTP plugin for WordPress is vulnerable to Stored Cross-Site Scripting via an email subject in versions up to, and including, 2.2.4 due to insufficient input…
CVE-2023-1430
FL
Fluentcrm
Wpmanageninja
6.5
1%
Jun 9The FluentCRM - Marketing Automation For WordPress plugin for WordPress is vulnerable to unauthorized modification of data in versions up to, and including, 2.8.01 due to the use…
CVE-2022-47136
NT
Ninja Tables
Wpmanageninja
8.8
0%
May 25Cross-Site Request Forgery (CSRF) vulnerability in WPManageNinja LLC Ninja Tables – Best Data Table Plugin for WordPress plugin <= 4.3.4 versions
CVE-2022-47137
NT
Ninja Tables
Wpmanageninja
4.8
0%
May 10Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in WPManageNinja LLC Ninja Tables plugin <= 4.3.4 versions
CVE-2023-0219
FL
Fluentsmtp
Wpmanageninja
5.4
1%
Mar 13The FluentSMTP WordPress plugin before 2.2.3 does not sanitize or escape email content, making it vulnerable to stored cross-site scripting attacks (XSS) when an administrator…
CVE-2022-4746
FL
Fluentauth
Wpmanageninja
7.5
1%
Jan 23The FluentAuth WordPress plugin before 1.0.2 prioritizes getting a visitor's IP address from certain HTTP headers over PHP's REMOTE_ADDR, which makes it possible to bypass the…
CVE-2022-2559
FS
Fluent Support
Wpmanageninja
7.2
1%
Aug 29The Fluent Support WordPress plugin before 1.5.8 does not properly sanitise, validate and escape various parameters before using them in an SQL statement, leading to an SQL…
CVE-2022-2544
NJ
Ninja Job Board
Wpmanageninja
7.5
5%
Aug 22The Ninja Job Board WordPress plugin before 1.3.3 does not protect the directory where it stores uploaded resumes, making it vulnerable to unauthenticated Directory Listing which…
CVE-2021-24900
NT
Ninja Tables
Wpmanageninja
4.8
1%
Feb 1The Ninja Tables WordPress plugin before 4.1.8 does not sanitise and escape some of its table fields, which could allow high privilege users to perform Cross-Site Scripting…
CVE-2021-24528
FL
Fluentsmtp
Wpmanageninja
5.4
1%
Aug 30The FluentSMTP WordPress plugin before 2.0.1 does not sanitize parameters before storing the settings in the database, nor does the plugin escape the values before outputting them…