Skip to content
OpenAdvisories

Vendor

WP ManageNinja

68 known vulnerabilities.

Products

Fluent Forms – Customizable Contact Forms, Survey, Quiz, & Conversational Form Builder 7 Ninja Tables 6 Fluent CRM 5 Fluent Boards Pro 5 Fluent Forms Pro Add On Pack 4 FluentCart A New Era of eCommerce – Faster, Lighter, and Simpler 4 FluentForm 4 FluentBooking Pro 3 Fluent Booking 3 FluentCRM Pro 3 Fluent Support – Helpdesk & Customer Support Ticket System 2 Fluent Support 2 Fluent Support Pro 2 FluentBoards 2 FluentCart 2 FluentCommunity 2 Best Payments Plugin for WP 2 Ninja Tables Pro 1 FluentAuth 1 Fluent Affiliate Pro 1 Ninja Tables – Best Data Table Plugin for WordPress 1 Fluent PDF Generator 1 FluentSMTP – WP SMTP Plugin with Amazon SES, SendGrid, Mailgun, Postmark, Cloudflare, toSend, Gmail and Any SMTP 1 WP Fluent Forms 1 FluentPlayer Pro 1 Fluent Support – WordPress Helpdesk and Customer Support Ticket Plugin 1 Fluent Forms Pro 1
All Critical High Medium Low Exploited only Public exploit

40 results · Clear filters · Feed

  • Medium 6.5
    CVE-2026-120858

    WordPress FluentForm plugin <= 6.2.16 - Broken Access Control vulnerability

    Missing Authorization vulnerability in WP ManageNinja LLC FluentForm fluentform allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects FluentForm: from n/a through 6.2.16.

    WP ManageNinja FluentForm
  • Medium 5.4
    CVE-2026-122659

    WordPress Fluent Booking plugin <= 2.5.0 - Broken Access Control vulnerability

    Missing Authorization vulnerability in WP ManageNinja LLC Fluent Booking fluent-booking allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Fluent Booking: from n/a through 2.5.0.

    WP ManageNinja Fluent Booking
  • Medium 4.3
    CVE-2026-119486

    WordPress FluentBoards plugin <= 2.2.2 - Broken Access Control vulnerability

    Missing Authorization vulnerability in WP ManageNinja LLC FluentBoards fluent-boards allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects FluentBoards: from n/a through 2.2.2.

    WP ManageNinja FluentBoards
  • Medium 5.3
    CVE-2026-121781

    WordPress Fluent Booking plugin <= 2.5.0 - Broken Access Control vulnerability

    Missing Authorization vulnerability in WP ManageNinja LLC Fluent Booking fluent-booking allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Fluent Booking: from n/a through 2.5.0.

    WP ManageNinja Fluent Booking
  • Medium 5.3
    CVE-2026-62056

    WordPress Fluent CRM plugin <= 3.2.6 - Broken Access Control vulnerability

    Missing Authorization vulnerability in WP ManageNinja LLC Fluent CRM fluent-crm allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Fluent CRM: from n/a through 3.2.6.

    WP ManageNinja Fluent CRM
  • Medium 5.4
    CVE-2026-62141

    WordPress Fluent CRM plugin <= 3.2.6 - Broken Access Control vulnerability

    Missing Authorization vulnerability in WP ManageNinja LLC Fluent CRM fluent-crm allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Fluent CRM: from n/a through 3.2.6.

    WP ManageNinja Fluent CRM
  • Medium 5.3
    CVE-2026-111831

    WordPress FluentForm plugin <= 6.2.15 - Broken Access Control vulnerability

    Missing Authorization vulnerability in WP ManageNinja LLC FluentForm fluentform allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects FluentForm: from n/a through 6.2.15.

    WP ManageNinja FluentForm
  • Medium 4.3
    CVE-2026-111836

    WordPress FluentCommunity plugin <= 2.11.0 - Broken Access Control vulnerability

    Missing Authorization vulnerability in WP ManageNinja LLC FluentCommunity fluent-community allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects FluentCommunity: from n/a through 2.11.0.

    WP ManageNinja FluentCommunity
  • Medium 4.9
    CVE-2026-103518

    FluentCart A New Era of eCommerce <= 1.7.0 - Authenticated (Administrator+) SQL Injection via 'products.variants' Array Keys

    The FluentCart A New Era of eCommerce – Faster, Lighter, and Simpler plugin for WordPress is vulnerable to generic SQL Injection via the 'products[*].variants[*].<attacker-chosen key>' parameter in all versions up to, and including, 1.7.0 due to insufficient …

    WP ManageNinja FluentCart A New Era of eCommerce – Faster, Lighter, and Simpler Web / CMS
  • Medium 5.4
    CVE-2026-109696

    WordPress FluentBoards plugin <= 2.1.0 - Broken Access Control vulnerability

    Missing Authorization vulnerability in WP ManageNinja LLC FluentBoards fluent-boards allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects FluentBoards: from n/a through 2.1.0.

    WP ManageNinja FluentBoards
  • Medium 5.4
    CVE-2026-15178

    Fluent Forms <= 6.2.5 - Missing Authorization to Authenticated (Custom+) Sensitive Data Exposure and Modification

    The Fluent Forms plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 6.2.5. This is due to the plugin not properly verifying that a user is authorized to perform an action. This makes it possible for authenticated …

    WP ManageNinja Fluent Forms – Customizable Contact Forms, Survey, Quiz, & Conversational Form Builder Web / CMS
  • Medium 4.7
    CVE-2026-101324

    Fluent Forms <= 6.2.14 - Reflected Cross-Site Scripting via '{get.*}' Editor SmartCode Parameter

    The Fluent Forms – Customizable Contact Forms, Survey, Quiz, & Conversational Form Builder plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'any attacker-chosen name matching the {get.NAME} placeholder (PoC uses 'proof')' parameter…

    WP ManageNinja Fluent Forms – Customizable Contact Forms, Survey, Quiz, & Conversational Form Builder Web / CMS
  • Medium 5.3
    CVE-2026-94669

    WordPress Fluent Forms Pro Add On Pack plugin <= 6.2.13 - Broken Access Control vulnerability

    Missing Authorization vulnerability in WP ManageNinja LLC Fluent Forms Pro Add On Pack fluentformpro allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Fluent Forms Pro Add On Pack: from n/a through 6.2.13.

    WP ManageNinja Fluent Forms Pro Add On Pack
  • Medium 6.5
    CVE-2026-103343

    WordPress FluentForm plugin <= 6.2.14 - Cross Site Scripting (XSS) vulnerability

    Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in WP ManageNinja LLC FluentForm fluentform allows Stored XSS.This issue affects FluentForm: from n/a through 6.2.14.

    WP ManageNinja FluentForm
  • Medium 5.3
    CVE-2026-103353

    WordPress FluentForm plugin <= 6.2.14 - Broken Access Control vulnerability

    Incorrect Behavior Order vulnerability in WP ManageNinja LLC FluentForm fluentform allows Removing Important Client Functionality.This issue affects FluentForm: from n/a through 6.2.14.

    WP ManageNinja FluentForm
  • Medium 5.4
    CVE-2026-94679

    WordPress Fluent Support plugin <= 2.3.2 - Broken Access Control vulnerability

    Subscriber Broken Access Control in Fluent Support <= 2.3.2 versions.

    WP ManageNinja Fluent Support
  • Medium 5.3
    CVE-2026-78296

    WordPress FluentAuth plugin <= 2.1.2 - Email Verification Bypass vulnerability

    Insufficient Verification of Data Authenticity vulnerability in WP ManageNinja LLC FluentAuth allows Identity Spoofing. This issue affects FluentAuth: from n/a through 2.1.2.

    WP ManageNinja FluentAuth
  • Medium 5.9
    CVE-2026-84766

    WordPress FluentBooking Pro plugin <= 2.2.1 - Bypass Vulnerability vulnerability

    Unauthenticated Bypass Vulnerability in FluentBooking Pro <= 2.2.1 versions.

    WP ManageNinja FluentBooking Pro
  • Medium 4.9
    CVE-2026-81272

    WordPress FluentPlayer Pro plugin <= 1.3.2 - Broken Access Control vulnerability

    Editor Broken Access Control in FluentPlayer Pro <= 1.3.2 versions.

    WP ManageNinja FluentPlayer Pro
  • Medium 6.8
    CVE-2026-78275

    WordPress Fluent Boards Pro plugin <= 2.0.11 - Arbitrary File Deletion vulnerability

    Editor Arbitrary File Deletion in Fluent Boards Pro <= 2.0.11 versions.

    WP ManageNinja Fluent Boards Pro
  • Medium 6.5
    CVE-2026-78273

    WordPress Fluent Boards Pro plugin <= 2.0.11 - Cross Site Scripting (XSS) vulnerability

    Subscriber Cross Site Scripting (XSS) in Fluent Boards Pro <= 2.0.11 versions.

    WP ManageNinja Fluent Boards Pro
  • Medium 5.4
    CVE-2026-78279

    WordPress Fluent Support Pro plugin <= 2.3.1 - Cross Site Request Forgery (CSRF) vulnerability

    Unauthenticated Cross Site Request Forgery (CSRF) in Fluent Support Pro <= 2.3.1 versions.

    WP ManageNinja Fluent Support Pro
  • Medium 4.9
    CVE-2026-78277

    WordPress FluentCRM Pro plugin <= 3.1.12 - Server Side Request Forgery (SSRF) vulnerability

    Subscriber Server Side Request Forgery (SSRF) in FluentCRM Pro <= 3.1.12 versions.

    WP ManageNinja FluentCRM Pro
  • Medium 5.3
    CVE-2026-78278

    WordPress Fluent Boards Pro plugin <= 2.0.11 - Insecure Direct Object References (IDOR) vulnerability

    Subscriber Insecure Direct Object References (IDOR) in Fluent Boards Pro <= 2.0.11 versions.

    WP ManageNinja Fluent Boards Pro
  • Medium 5.4
    CVE-2026-78272

    WordPress Fluent Support Pro plugin <= 2.3.1 - Broken Access Control vulnerability

    Subscriber Broken Access Control in Fluent Support Pro <= 2.3.1 versions.

    WP ManageNinja Fluent Support Pro
  • Medium 6.5
    CVE-2026-66467

    WordPress FluentCommunity plugin <= 2.7.5 - Cross Site Scripting (XSS) vulnerability

    Subscriber Cross Site Scripting (XSS) in FluentCommunity <= 2.7.5 versions.

    WP ManageNinja FluentCommunity
  • Medium 6.1
    CVE-2026-17571

    Fluent Forms <= 6.2.8 - Reflected Cross-Site Scripting via 'param'

    The Fluent Forms – Customizable Contact Forms, Survey, Quiz, & Conversational Form Builder plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via 'param' in all versions up to, and including, 6.2.8 due to insufficient input sanitization and …

    WP ManageNinja Fluent Forms – Customizable Contact Forms, Survey, Quiz, & Conversational Form Builder Web / CMS
  • Medium 5.3
    CVE-2026-17567

    Fluent Forms <= 6.2.8 - Unauthenticated Sensitive Information Exposure via Insecure Direct Object Reference and Weak Transaction Hash in 'transaction' Parameter

    The Fluent Forms – Customizable Contact Forms, Survey, Quiz, & Conversational Form Builder plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions up to, and including, 6.2.8 via the 'transaction' parameter due to missing valida…

    WP ManageNinja Fluent Forms – Customizable Contact Forms, Survey, Quiz, & Conversational Form Builder Web / CMS
  • Medium 6.4
    CVE-2026-15665

    Fluent Support <= 2.3.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'redirect-to' Shortcode Attribute

    The Fluent Support – Helpdesk & Customer Support Ticket System plugin for WordPress is vulnerable to Stored Cross-Site Scripting via 'redirect-to' Shortcode Attribute in all versions up to, and including, 2.3.0 due to insufficient input sanitization and outpu…

    WP ManageNinja Fluent Support – Helpdesk & Customer Support Ticket System Web / CMS
  • Medium 5.3
    CVE-2026-65474

    WordPress Ninja Tables plugin <= 5.2.10 - Sensitive Data Exposure vulnerability

    Unauthenticated Sensitive Data Exposure in Ninja Tables <= 5.2.10 versions.

    WP ManageNinja Ninja Tables
  • Medium 6.5
    CVE-2026-65470

    WordPress Fluent Support plugin <= 2.3.0 - Cross Site Scripting (XSS) vulnerability

    Contributor Cross Site Scripting (XSS) in Fluent Support <= 2.3.0 versions.

    WP ManageNinja Fluent Support
  • Medium 5.4
    CVE-2026-5069

    Fluent Forms <= 6.2.1 - Incorrect Authorization to Authenticated (Subscriber+) Arbitrary Subscription Cancellation via 'subscription_id'

    The Fluent Forms plugin for WordPress is vulnerable to incorrect authorization via the 'subscription_id' parameter in versions up to, and including, 6.2.1. This is due to insufficient ownership authorization checks in the payment cancellation AJAX flow. This …

    WP ManageNinja Fluent Forms – Customizable Contact Forms, Survey, Quiz, & Conversational Form Builder Web / CMS
  • Medium 6.5
    CVE-2026-57638

    WordPress Fluent Booking plugin <= 2.1.0 - Cross Site Scripting (XSS) vulnerability

    Contributor Cross Site Scripting (XSS) in Fluent Booking <= 2.1.0 versions.

    WP ManageNinja Fluent Booking
  • Medium 4.9
    CVE-2025-13495

    FluentCart A New Era of eCommerce <= 1.3.1 - Authenticated (Administrator+) SQL Injection via 'groupKey' Parameter

    The FluentCart plugin for WordPress is vulnerable to SQL Injection via the 'groupKey' parameter in all versions up to, and including, 1.3.1. This is due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing…

    WP ManageNinja FluentCart A New Era of eCommerce – Faster, Lighter, and Simpler Web / CMS
  • Medium 5.3
    CVE-2024-23504

    WordPress Ninja Tables plugin <= 5.0.5 - Broken Access Control vulnerability

    Missing Authorization vulnerability in WPManageNinja LLC Ninja Tables.This issue affects Ninja Tables: from n/a through 5.0.5.

    WP ManageNinja Ninja Tables
  • Medium 4.3
    CVE-2024-23503

    WordPress Ninja Tables plugin <= 5.0.6 - Broken Access Control vulnerability

    Missing Authorization vulnerability in WPManageNinja LLC Ninja Tables.This issue affects Ninja Tables: from n/a through 5.0.6.

    WP ManageNinja Ninja Tables
  • Medium 4.4
    CVE-2024-35635

    WordPress Ninja Tables plugin <= 5.0.9 - Server Side Request Forgery (SSRF) vulnerability

    Server-Side Request Forgery (SSRF) vulnerability in WPManageNinja LLC Ninja Tables.This issue affects Ninja Tables: from n/a through 5.0.9.

    WP ManageNinja Ninja Tables
  • Medium 4.9
    CVE-2023-6953

    PDF Generator For Fluent Forms <= 1.1.7 - Cross-Site Scripting

    The PDF Generator For Fluent Forms – The Contact Form Plugin plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the header, PDF body and footer content parameters in all versions up to, and including, 1.1.7 due to insufficient input sanitiz…

    WP ManageNinja Fluent PDF Generator Web / CMS
  • Medium 4.3
    CVE-2022-47136

    WordPress Ninja Tables Plugin <= 4.3.4 is vulnerable to Cross Site Request Forgery (CSRF)

    Cross-Site Request Forgery (CSRF) vulnerability in WPManageNinja LLC Ninja Tables – Best Data Table Plugin for WordPress plugin <= 4.3.4 versions.

    WP ManageNinja Ninja Tables – Best Data Table Plugin for WordPress Web / CMS
  • Medium 5.9
    CVE-2022-47137

    WordPress Ninja Tables Plugin <= 4.3.4 is vulnerable to Cross Site Scripting (XSS)

    Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in WPManageNinja LLC Ninja Tables plugin <= 4.3.4 versions.

    WP ManageNinja Ninja Tables