What’s Vulnerable › Products
WPManageNinja LLC Ninja Tables vulnerabilities
17 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 10 published in the last 12 months.
Check whether your WPManageNinja LLC Ninja Tables version is affected
Latest WPManageNinja LLC Ninja Tables vulnerabilities
- CVE-2026-86612 — Ninja Tables < 5.2.17 - Unauthenticated Arbitrary Shortcode Execution via Fluent Forms Data Source (CVSS 5.6)
- CVE-2026-61964 — WordPress Ninja Tables plugin <= 5.2.9 - Cross Site Scripting (XSS) vulnerability (CVSS 7.1)
- CVE-2026-65474 — WordPress Ninja Tables plugin <= 5.2.10 - Sensitive Data Exposure vulnerability (CVSS 5.3)
- CVE-2026-2306 — Ninja Tables <= 5.2.6 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Table Creation (CVSS 4.3)
- CVE-2026-25008 — WordPress Ninja Tables plugin <= 5.2.5 - Sensitive Data Exposure vulnerability (CVSS 4.3)
- CVE-2025-69351 — WordPress Ninja Tables plugin <= 5.2.4 - SQL Injection vulnerability (CVSS 8.5)
- CVE-2025-67519 — WordPress Ninja Tables plugin <= 5.2.3 - SQL Injection vulnerability (CVSS 7.6)
- CVE-2025-2940 — Ninja Tables – Easy Data Table Builder <= 5.0.18 - Unauthenticated Server-Side Request Forgery (CVSS 7.2)
- CVE-2025-2939 — Ninja Tables – Easy Data Table Builder <= 5.0.18 - Unauthenticated PHP Object Injection to Limited Remote Code Execution (CVSS 5.6)
- CVE-2024-12772 — Ninja Tables < 5.0.17 - Admin+ Stored XSS (CVSS 5.4)
- CVE-2024-7304 — Ninja Tables – Easiest Data Table Builder <= 5.0.12 - Authenticated (Author+) Stored Cross-Site Scripting via SVG File Upload (CVSS 5.4)
- CVE-2024-23504 — WordPress Ninja Tables plugin <= 5.0.5 - Broken Access Control vulnerability (CVSS 5.3)
- CVE-2024-23503 — WordPress Ninja Tables plugin <= 5.0.6 - Broken Access Control vulnerability (CVSS 4.3)
- CVE-2024-35635 — WordPress Ninja Tables plugin <= 5.0.9 - Server Side Request Forgery (SSRF) vulnerability (CVSS 4.9)
- CVE-2022-47136 — WordPress Ninja Tables Plugin <= 4.3.4 is vulnerable to Cross Site Request Forgery (CSRF) (CVSS 8.8)
- CVE-2022-47137 — WordPress Ninja Tables Plugin <= 4.3.4 is vulnerable to Cross Site Scripting (XSS) (CVSS 4.8)
- CVE-2021-24900 — Ninja Tables < 4.1.8 - Admin+ Stored Cross-Site Cross-Site Scripting (CVSS 4.8)