Skip to content
OpenAdvisories

Vendor

Ninja Team

48 known vulnerabilities.

Products

FileBird – WordPress Media Library Folders & File Manager 8 File Manager Pro – Filester 6 Filebird 4 WP Chat App 4 FastDup – Fastest WordPress Migration & Duplicator 3 GDPR CCPA Compliance Support 3 WP Telegram Chat Widget 2 Click to Chat – WP Support All-in-One Floating Widget 2 GDPR CCPA Compliance & Cookie Consent Banner 2 WP Duplicate Page 2 Notibar – Notification Bar for WordPress 2 Database for Contact Form 7 1 FastDup 1 Ninja Beaver Add-ons for Beaver Builder 1 Notibar 1 WP Click to Chat – Email, Live Chat, Call & Book Now Buttons 1 FileBird Document Library 1 File Manager Pro 1 Live Chat with Facebook Messenger 1 FileBird Pro 1 Multi Step for Contact Form 1
All Critical High Medium Low Exploited only Public exploit

6 results · Clear filters · Feed

  • High 8.8
    CVE-2026-1104

    FastDup – Fastest WordPress Migration & Duplicator <= 2.7.1 - Missing Authorization to Authenticated (Contributor+) Backup Creation and Download

    The FastDup – Fastest WordPress Migration & Duplicator plugin for WordPress is vulnerable to unauthorized backup creation and download due to a missing capability check on REST API endpoints in all versions up to, and including, 2.7.1. This makes it possible …

    Ninja Team FastDup – Fastest WordPress Migration & Duplicator Web / CMS
  • High 7.2
    CVE-2025-3234

    File Manager Pro – Filester <= 1.8.8 - Authenticated (Administrator+) Arbitrary File Upload

    The File Manager Pro – Filester plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in all versions up to, and including, 1.8.8. This makes it possible for authenticated attackers, with Administrator-level access a…

    Ninja Team File Manager Pro – Filester Web / CMS
  • High 7.2
    CVE-2024-9669

    File Manager Pro – Filester <= 1.8.5 - Authenticated (Administrator+) Local JavaScript File Inclusion

    The File Manager Pro – Filester plugin for WordPress is vulnerable to Local JavaScript File Inclusion in all versions up to, and including, 1.8.5 via the 'fm_locale' parameter. This makes it possible for authenticated attackers, with Administrator-level acces…

    Ninja Team File Manager Pro – Filester Web / CMS
  • High 7.5
    CVE-2024-8066

    File Manager Pro – Filester <= 1.8.6- Authenticated (Subscriber+) Arbitrary File Upload

    The File Manager Pro – Filester plugin for WordPress is vulnerable to arbitrary file uploads due to missing validation in the 'fsConnector' function in all versions up to, and including, 1.8.6. This makes it possible for authenticated attackers, with Subscrib…

    Ninja Team File Manager Pro – Filester Web / CMS
  • High 7.5
    CVE-2024-7031

    File Manager Pro – Filester <= 1.8.2 - Authenticated Plugin Settings Update

    The File Manager Pro – Filester plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the 'njt_fs_saveSettingRestrictions' function in all versions up to, and including, 1.8.2. This makes it possible for …

    Ninja Team File Manager Pro – Filester Web / CMS
  • High 7.1
    CVE-2024-29103

    WordPress Database for Contact Form 7 plugin <= 3.0.6 - Unauthenticated Cross Site Scripting (XSS) vulnerability

    Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in NinjaTeam Database for Contact Form 7 allows Stored XSS.This issue affects Database for Contact Form 7: from n/a through 3.0.6.

    Ninja Team Database for Contact Form 7