Skip to content
OpenAdvisories

Vendor

Ninja Team

49 known vulnerabilities.

Products

FileBird – WordPress Media Library Folders & File Manager 8 File Manager Pro – Filester 6 Filebird 4 WP Chat App 4 FastDup – Fastest WordPress Migration & Duplicator 3 GDPR CCPA Compliance Support 3 WP Telegram Chat Widget 2 Click to Chat – WP Support All-in-One Floating Widget 2 GDPR CCPA Compliance & Cookie Consent Banner 2 WP Duplicate Page 2 Notibar – Notification Bar for WordPress 2 Multi Step for Contact Form 7 1 Database for Contact Form 7 1 FastDup 1 Ninja Beaver Add-ons for Beaver Builder 1 Notibar 1 WP Click to Chat – Email, Live Chat, Call & Book Now Buttons 1 FileBird Document Library 1 File Manager Pro 1 Live Chat with Facebook Messenger 1 FileBird Pro 1 Multi Step for Contact Form 1
All Critical High Medium Low Exploited only Public exploit

3 results · Clear filters · Feed

  • Critical 9.6
    CVE-2026-52703

    WordPress FastDup plugin <= 2.7.2 - Path Traversal vulnerability

    Unauthenticated Path Traversal in FastDup <= 2.7.2 versions.

    Ninja Team FastDup
  • Critical 9.3
    CVE-2024-47331

    WordPress Multi Step for Contact Form plugin <= 2.7.7 - Unauthenticated SQL Injection vulnerability

    Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Ninja Team Multi Step for Contact Form cf7-multi-step allows SQL Injection.This issue affects Multi Step for Contact Form: from n/a through <= 2.7.7.

    Ninja Team Multi Step for Contact Form
  • Critical 9.8
    CVE-2020-36718

    GDPR CCPA Compliance Support <= 2.3 - PHP Object Injection

    The GDPR CCPA Compliance Support plugin for WordPress is vulnerable to PHP Object Injection in versions up to, and including, 2.3 via deserialization of untrusted input "njt_gdpr_allow_permissions" value. This allows unauthenticated attackers to inject a PHP …

    Ninja Team GDPR CCPA Compliance & Cookie Consent Banner Web / CMS