Skip to content
OpenAdvisories

Vendor

WP ManageNinja

68 known vulnerabilities.

WP ManageNinja at a glance

Last 12 months
60
Critical · all time
4
Exploited · all time
0
Public exploit · all time
0
New vulnerabilities per month · last 12 months
0 13 25 December 2025: 1 vulnerability Dec 2025 January 2026: 0 vulnerabilities February 2026: 1 vulnerability March 2026: 0 vulnerabilities Mar April 2026: 0 vulnerabilities May 2026: 0 vulnerabilities June 2026: 2 vulnerabilities Jun July 2026: 7 vulnerabilities August 2026: 22 vulnerabilities, 3 critical September 2026: 3 vulnerabilities Sep October 2026: 18 vulnerabilities, 1 critical November 2026: 6 vulnerabilities
Show as table
MonthVulnerabilitiesCritical
Nov 202660
Oct 2026181
Sep 202630
Aug 2026223
Jul 202670
Jun 202620
May 202600
Apr 202600
Mar 202600
Feb 202610
Jan 202600
Dec 202510
Nov 202500
Oct 202500
Sep 202500
Aug 202500
Jul 202500
Jun 202500
May 202500
Apr 202500
Mar 202500
Feb 202500
Jan 202500
Dec 202400

Products

Fluent Forms – Customizable Contact Forms, Survey, Quiz, & Conversational Form Builder 7 Ninja Tables 6 Fluent CRM 5 Fluent Boards Pro 5 Fluent Forms Pro Add On Pack 4 FluentCart A New Era of eCommerce – Faster, Lighter, and Simpler 4 FluentForm 4 FluentBooking Pro 3 Fluent Booking 3 FluentCRM Pro 3 Fluent Support – Helpdesk & Customer Support Ticket System 2 Fluent Support 2 Fluent Support Pro 2 FluentBoards 2 FluentCart 2 FluentCommunity 2 Best Payments Plugin for WP 2 Ninja Tables Pro 1 FluentAuth 1 Fluent Affiliate Pro 1 Ninja Tables – Best Data Table Plugin for WordPress 1 Fluent PDF Generator 1 FluentSMTP – WP SMTP Plugin with Amazon SES, SendGrid, Mailgun, Postmark, Cloudflare, toSend, Gmail and Any SMTP 1 WP Fluent Forms 1 FluentPlayer Pro 1 Fluent Support – WordPress Helpdesk and Customer Support Ticket Plugin 1 Fluent Forms Pro 1
All Critical High Medium Low Exploited only Public exploit

68 results · Feed

  • Medium 6.5
    CVE-2026-120858

    WordPress FluentForm plugin <= 6.2.16 - Broken Access Control vulnerability

    Missing Authorization vulnerability in WP ManageNinja LLC FluentForm fluentform allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects FluentForm: from n/a through 6.2.16.

    WP ManageNinja FluentForm
  • Medium 5.4
    CVE-2026-122659

    WordPress Fluent Booking plugin <= 2.5.0 - Broken Access Control vulnerability

    Missing Authorization vulnerability in WP ManageNinja LLC Fluent Booking fluent-booking allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Fluent Booking: from n/a through 2.5.0.

    WP ManageNinja Fluent Booking
  • Medium 4.3
    CVE-2026-119486

    WordPress FluentBoards plugin <= 2.2.2 - Broken Access Control vulnerability

    Missing Authorization vulnerability in WP ManageNinja LLC FluentBoards fluent-boards allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects FluentBoards: from n/a through 2.2.2.

    WP ManageNinja FluentBoards
  • Medium 5.3
    CVE-2026-121781

    WordPress Fluent Booking plugin <= 2.5.0 - Broken Access Control vulnerability

    Missing Authorization vulnerability in WP ManageNinja LLC Fluent Booking fluent-booking allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Fluent Booking: from n/a through 2.5.0.

    WP ManageNinja Fluent Booking
  • Low 3.7
    CVE-2026-119213

    Fluent Support <= 2.4.7 — Unauthenticated Limited Modification of Linked Customer Profile Fields via Fluent Forms Feed

    The Fluent Support – Helpdesk & Customer Support Ticket System plugin for WordPress is vulnerable to unauthenticated modification of a linked customer's stored profile fields in versions up to, and including, 2.4.7 Its first-party Fluent Forms integration (Fe…

    WP ManageNinja Fluent Support – Helpdesk & Customer Support Ticket System Web / CMS
  • High 8.1
    CVE-2026-120577

    FluentCart A New Era of eCommerce <= 1.6.2 - Authenticated (Custom+) Arbitrary File Deletion via 'file_path' Parameter

    The FluentCart A New Era of eCommerce – Faster, Lighter, and Simpler plugin for WordPress is vulnerable to arbitrary file deletion due to insufficient file path validation in the deleteFile function in all versions up to, and including, 1.6.2. This makes it p…

    WP ManageNinja FluentCart A New Era of eCommerce – Faster, Lighter, and Simpler Web / CMS
  • Medium 5.3
    CVE-2026-62056

    WordPress Fluent CRM plugin <= 3.2.6 - Broken Access Control vulnerability

    Missing Authorization vulnerability in WP ManageNinja LLC Fluent CRM fluent-crm allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Fluent CRM: from n/a through 3.2.6.

    WP ManageNinja Fluent CRM
  • Medium 5.4
    CVE-2026-62141

    WordPress Fluent CRM plugin <= 3.2.6 - Broken Access Control vulnerability

    Missing Authorization vulnerability in WP ManageNinja LLC Fluent CRM fluent-crm allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Fluent CRM: from n/a through 3.2.6.

    WP ManageNinja Fluent CRM
  • Medium 5.3
    CVE-2026-111831

    WordPress FluentForm plugin <= 6.2.15 - Broken Access Control vulnerability

    Missing Authorization vulnerability in WP ManageNinja LLC FluentForm fluentform allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects FluentForm: from n/a through 6.2.15.

    WP ManageNinja FluentForm
  • Medium 4.3
    CVE-2026-111836

    WordPress FluentCommunity plugin <= 2.11.0 - Broken Access Control vulnerability

    Missing Authorization vulnerability in WP ManageNinja LLC FluentCommunity fluent-community allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects FluentCommunity: from n/a through 2.11.0.

    WP ManageNinja FluentCommunity
  • High 7.5
    CVE-2026-103525

    FluentCart A New Era of eCommerce <= 1.7.0 - Insecure Direct Object Reference to Unauthenticated Sensitive Information Disclosure via 'order_id' and 'billing_address_id' Parameters

    The FluentCart A New Era of eCommerce – Faster, Lighter, and Simpler plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions up to, and including, 1.7.0 via the 'order_id + billing_address_id (also shipping_address_id)' paramete…

    WP ManageNinja FluentCart A New Era of eCommerce – Faster, Lighter, and Simpler Web / CMS
  • Medium 4.9
    CVE-2026-103518

    FluentCart A New Era of eCommerce <= 1.7.0 - Authenticated (Administrator+) SQL Injection via 'products.variants' Array Keys

    The FluentCart A New Era of eCommerce – Faster, Lighter, and Simpler plugin for WordPress is vulnerable to generic SQL Injection via the 'products[*].variants[*].<attacker-chosen key>' parameter in all versions up to, and including, 1.7.0 due to insufficient …

    WP ManageNinja FluentCart A New Era of eCommerce – Faster, Lighter, and Simpler Web / CMS
  • High 8.8
    CVE-2026-109693

    WordPress Fluent CRM plugin <= 3.2.5 - Privilege Escalation vulnerability

    Incorrect Privilege Assignment vulnerability in WP ManageNinja LLC Fluent CRM fluent-crm allows Privilege Escalation.This issue affects Fluent CRM: from n/a through 3.2.5.

    WP ManageNinja Fluent CRM
  • High 7.5
    CVE-2026-109695

    WordPress FluentCart plugin <= 1.7.1 - Sensitive Data Exposure vulnerability

    Insertion of Sensitive Information Into Sent Data vulnerability in WPManageNinja FluentCart fluent-cart allows Retrieve Embedded Sensitive Data.This issue affects FluentCart: from n/a through 1.7.1.

    WP ManageNinja FluentCart
  • Critical 9.8
    CVE-2026-109694

    WordPress Fluent CRM plugin <= 3.2.5 - Privilege Escalation vulnerability

    Incorrect Privilege Assignment vulnerability in WP ManageNinja LLC Fluent CRM fluent-crm allows Privilege Escalation.This issue affects Fluent CRM: from n/a through 3.2.5.

    WP ManageNinja Fluent CRM
  • High 7.1
    CVE-2026-108484

    WordPress Best Payments Plugin for WP plugin <= 4.6.27 - Cross Site Scripting (XSS) vulnerability

    Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in WPManageNinja Best Payments Plugin for WP wp-payment-form allows Stored XSS.This issue affects Best Payments Plugin for WP: from n/a through 4.6.27.

    WP ManageNinja Best Payments Plugin for WP
  • Medium 5.4
    CVE-2026-109696

    WordPress FluentBoards plugin <= 2.1.0 - Broken Access Control vulnerability

    Missing Authorization vulnerability in WP ManageNinja LLC FluentBoards fluent-boards allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects FluentBoards: from n/a through 2.1.0.

    WP ManageNinja FluentBoards
  • Medium 5.4
    CVE-2026-15178

    Fluent Forms <= 6.2.5 - Missing Authorization to Authenticated (Custom+) Sensitive Data Exposure and Modification

    The Fluent Forms plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 6.2.5. This is due to the plugin not properly verifying that a user is authorized to perform an action. This makes it possible for authenticated …

    WP ManageNinja Fluent Forms – Customizable Contact Forms, Survey, Quiz, & Conversational Form Builder Web / CMS
  • Medium 4.7
    CVE-2026-101324

    Fluent Forms <= 6.2.14 - Reflected Cross-Site Scripting via '{get.*}' Editor SmartCode Parameter

    The Fluent Forms – Customizable Contact Forms, Survey, Quiz, & Conversational Form Builder plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'any attacker-chosen name matching the {get.NAME} placeholder (PoC uses 'proof')' parameter…

    WP ManageNinja Fluent Forms – Customizable Contact Forms, Survey, Quiz, & Conversational Form Builder Web / CMS
  • High 7.5
    CVE-2026-39789

    WordPress Fluent Affiliate Pro plugin <= 1.6.4 - Broken Access Control vulnerability

    Unauthenticated Broken Access Control in Fluent Affiliate Pro <= 1.6.4 versions.

    WP ManageNinja Fluent Affiliate Pro
  • High 7.5
    CVE-2026-105072

    WordPress FluentBooking Pro plugin < 2.5.0 - Broken Access Control vulnerability

    Unauthenticated Broken Access Control in FluentBooking Pro < 2.5.0 versions.

    WP ManageNinja FluentBooking Pro
  • Medium 5.3
    CVE-2026-94669

    WordPress Fluent Forms Pro Add On Pack plugin <= 6.2.13 - Broken Access Control vulnerability

    Missing Authorization vulnerability in WP ManageNinja LLC Fluent Forms Pro Add On Pack fluentformpro allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Fluent Forms Pro Add On Pack: from n/a through 6.2.13.

    WP ManageNinja Fluent Forms Pro Add On Pack
  • Medium 6.5
    CVE-2026-103343

    WordPress FluentForm plugin <= 6.2.14 - Cross Site Scripting (XSS) vulnerability

    Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in WP ManageNinja LLC FluentForm fluentform allows Stored XSS.This issue affects FluentForm: from n/a through 6.2.14.

    WP ManageNinja FluentForm
  • Medium 5.3
    CVE-2026-103353

    WordPress FluentForm plugin <= 6.2.14 - Broken Access Control vulnerability

    Incorrect Behavior Order vulnerability in WP ManageNinja LLC FluentForm fluentform allows Removing Important Client Functionality.This issue affects FluentForm: from n/a through 6.2.14.

    WP ManageNinja FluentForm
  • Medium 5.4
    CVE-2026-94679

    WordPress Fluent Support plugin <= 2.3.2 - Broken Access Control vulnerability

    Subscriber Broken Access Control in Fluent Support <= 2.3.2 versions.

    WP ManageNinja Fluent Support
  • Medium 5.3
    CVE-2026-78296

    WordPress FluentAuth plugin <= 2.1.2 - Email Verification Bypass vulnerability

    Insufficient Verification of Data Authenticity vulnerability in WP ManageNinja LLC FluentAuth allows Identity Spoofing. This issue affects FluentAuth: from n/a through 2.1.2.

    WP ManageNinja FluentAuth
  • Medium 5.9
    CVE-2026-84766

    WordPress FluentBooking Pro plugin <= 2.2.1 - Bypass Vulnerability vulnerability

    Unauthenticated Bypass Vulnerability in FluentBooking Pro <= 2.2.1 versions.

    WP ManageNinja FluentBooking Pro
  • High 7.5
    CVE-2026-81297

    WordPress Fluent Forms Pro Add On Pack plugin <= 6.2.12 - Privilege Escalation vulnerability

    Subscriber Privilege Escalation in Fluent Forms Pro Add On Pack <= 6.2.12 versions.

    WP ManageNinja Fluent Forms Pro Add On Pack
  • High 7.5
    CVE-2026-81296

    WordPress Fluent Forms Pro Add On Pack plugin <= 6.2.12 - Broken Access Control vulnerability

    Unauthenticated Broken Access Control in Fluent Forms Pro Add On Pack <= 6.2.12 versions.

    WP ManageNinja Fluent Forms Pro Add On Pack
  • High 8.1
    CVE-2026-81273

    WordPress FluentBooking Pro plugin <= 2.2.4 - Cross Site Request Forgery (CSRF) vulnerability

    Unauthenticated Cross Site Request Forgery (CSRF) in FluentBooking Pro <= 2.2.4 versions.

    WP ManageNinja FluentBooking Pro
  • Medium 4.9
    CVE-2026-81272

    WordPress FluentPlayer Pro plugin <= 1.3.2 - Broken Access Control vulnerability

    Editor Broken Access Control in FluentPlayer Pro <= 1.3.2 versions.

    WP ManageNinja FluentPlayer Pro
  • High 7.2
    CVE-2026-78276

    WordPress Fluent Boards Pro plugin <= 2.0.11 - PHP Object Injection vulnerability

    Editor PHP Object Injection in Fluent Boards Pro <= 2.0.11 versions.

    WP ManageNinja Fluent Boards Pro
  • Medium 6.8
    CVE-2026-78275

    WordPress Fluent Boards Pro plugin <= 2.0.11 - Arbitrary File Deletion vulnerability

    Editor Arbitrary File Deletion in Fluent Boards Pro <= 2.0.11 versions.

    WP ManageNinja Fluent Boards Pro
  • Medium 6.5
    CVE-2026-78273

    WordPress Fluent Boards Pro plugin <= 2.0.11 - Cross Site Scripting (XSS) vulnerability

    Subscriber Cross Site Scripting (XSS) in Fluent Boards Pro <= 2.0.11 versions.

    WP ManageNinja Fluent Boards Pro
  • Critical 9.1
    CVE-2026-78274

    WordPress Fluent Boards Pro plugin <= 2.0.11 - Arbitrary File Upload vulnerability

    Editor Arbitrary File Upload in Fluent Boards Pro <= 2.0.11 versions.

    WP ManageNinja Fluent Boards Pro
  • High 7.2
    CVE-2026-78271

    WordPress FluentCRM Pro plugin <= 3.1.12 - Privilege Escalation vulnerability

    Editor Privilege Escalation in FluentCRM Pro <= 3.1.12 versions.

    WP ManageNinja FluentCRM Pro
  • Medium 5.4
    CVE-2026-78279

    WordPress Fluent Support Pro plugin <= 2.3.1 - Cross Site Request Forgery (CSRF) vulnerability

    Unauthenticated Cross Site Request Forgery (CSRF) in Fluent Support Pro <= 2.3.1 versions.

    WP ManageNinja Fluent Support Pro
  • Medium 4.9
    CVE-2026-78277

    WordPress FluentCRM Pro plugin <= 3.1.12 - Server Side Request Forgery (SSRF) vulnerability

    Subscriber Server Side Request Forgery (SSRF) in FluentCRM Pro <= 3.1.12 versions.

    WP ManageNinja FluentCRM Pro
  • Medium 5.3
    CVE-2026-78278

    WordPress Fluent Boards Pro plugin <= 2.0.11 - Insecure Direct Object References (IDOR) vulnerability

    Subscriber Insecure Direct Object References (IDOR) in Fluent Boards Pro <= 2.0.11 versions.

    WP ManageNinja Fluent Boards Pro
  • Medium 5.4
    CVE-2026-78272

    WordPress Fluent Support Pro plugin <= 2.3.1 - Broken Access Control vulnerability

    Subscriber Broken Access Control in Fluent Support Pro <= 2.3.1 versions.

    WP ManageNinja Fluent Support Pro