en
Ninja Team is a software company and WordPress plugin developer established in 2012. It builds website tools for media and document organization, file management, forms, compliance, chat widgets, notifications, and related workflows. Its software is normally deployed as plugins inside self-hosted WordPress sites and is intended for website owners, administrators, agencies, developers, and online businesses.
CyStack VulnScan continuously discovers assets, validates vulnerabilities, and helps security teams prioritize remediation across the organization.
CVE-2026-52703WordPress FastDup plugin <= 2.7.2 - Path Traversal vulnerabilityCVE-2025-68073WordPress GDPR CCPA Compliance Support plugin <= 2.7.4 - Broken Access Control vulnerabilityCVE-2025-52710WordPress File Manager Pro plugin <= 1.8.8 - Cross Site Scripting (XSS) VulnerabilityCVE-2025-48260WordPress GDPR CCPA Compliance Support plugin <= 2.7.3 - Broken Access Control VulnerabilityCVE-2025-31092WordPress Click to Chat – WP Support All-in-One Floating Widget plugin <= 2.3.4 - Cross Site Scripting (XSS) vulnerability| Vulnerability | Exploitation status | Fix | Affected product | Published | Severity |
|---|---|---|---|---|---|
CVE-2026-52703WordPress FastDup plugin <= 2.7.2 - Path Traversal vulnerability | Exploitation statusNot exploited | FixYes |
| Published06/15/2026 |
| SeverityCritical |
CVE-2025-68073WordPress GDPR CCPA Compliance Support plugin <= 2.7.4 - Broken Access Control vulnerability | Exploitation statusNot exploited | FixYes | Affected productGDPR CCPA Compliance Support | Published01/22/2026 | SeverityMedium |
|---|
CVE-2025-52710WordPress File Manager Pro plugin <= 1.8.8 - Cross Site Scripting (XSS) Vulnerability | Exploitation statusNot exploited | FixYes | Affected productFile Manager Pro | Published06/20/2025 | SeverityMedium |
|---|
CVE-2025-48260WordPress GDPR CCPA Compliance Support plugin <= 2.7.3 - Broken Access Control Vulnerability | Exploitation statusNot exploited | FixYes | Affected productGDPR CCPA Compliance Support | Published05/19/2025 | SeverityMedium |
|---|
CVE-2025-31092WordPress Click to Chat – WP Support All-in-One Floating Widget plugin <= 2.3.4 - Cross Site Scripting (XSS) vulnerability | Exploitation statusNot exploited | FixYes | Affected productClick to Chat – WP Support All-in-One Floating Widget | Published03/27/2025 | SeverityMedium |
|---|
CVE-2025-26977WordPress FileBird plugin <= 6.4.2.1 - Insecure Direct Object References (IDOR) vulnerability | Exploitation statusNot exploited | FixYes | Affected productFilebird | Published02/25/2025 | SeverityLow |
|---|
CVE-2025-24591WordPress GDPR CCPA Compliance & Cookie Consent Banner plugin <= 2.7.1 - Broken Access Control vulnerability | Exploitation statusNot exploited | FixYes | Affected productGDPR CCPA Compliance Support | Published01/24/2025 | SeverityMedium |
|---|
CVE-2024-54269WordPress Notibar plugin <= 2.1.4 - Broken Access Control vulnerability | Exploitation statusNot exploited | FixYes | Affected productNotibar | Published12/11/2024 | SeverityMedium |
|---|
CVE-2023-25966WordPress FileBird plugin <= 5.1.4 - Broken Access Control vulnerability | Exploitation statusNot exploited | FixYes | Affected productFilebird | Published12/09/2024 | SeverityMedium |
|---|
CVE-2024-53825WordPress FileBird Lite plugin <= 6.3.2 - Broken Access Control vulnerability | Exploitation statusNot exploited | FixYes | Affected productFilebird | Published12/06/2024 | SeverityMedium |
|---|
17 Results | Page 1 of 2