CveMateVulnerability intelligence

Ninja Team vulnerabilities

17 vulnerabilities

Known vulnerabilities in Ninja Team products, newest first, with CVSS severity, EPSS, KEV listings and ransomware use, across 11 products.

Products

11

Filebird4 vulnerabilities
GDPR CCPA Compliance Support3 vulnerabilities
Click To Chat – WP Support All In One Floating Widget2 vulnerabilities
Fastdup1 vulnerabilities
Fastdup – Fastest Wordpress Migration & Duplicator1 vulnerabilities
File Manager Pro1 vulnerabilities
Filebird – Wordpress Media Library Folders & File Manager1 vulnerabilities
Filebird Document Library1 vulnerabilities
Multi Step For Contact Form1 vulnerabilities
Ninja Beaver Add Ons For Beaver Builder1 vulnerabilities
Notibar1 vulnerabilities

CVE-2021-24385ninja teamfilebird – wordpress media library folders & file manager+25y ago12-07-2021 19:20

The Filebird Plugin 4.7.3 introduced a SQL injection vulnerability as it is making SQL queries without escaping user input data from a HTTP post request. This is a major vulnerability as the user input is not escaped and passed directly to the get_col function and it allows SQL injection. The Rest API endpoint which invokes this function also does not have any required permissions/authentication and can be accessed by an anonymous user.CVE-2025-52710ninja teamfile manager pro+11y ago20-06-2025 15:03

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Ninja Team File Manager Pro filester allows Stored XSS.This issue affects File Manager Pro: from n/a through <= 1.8.8.CVE-2025-68073ninja teamgdpr ccpa compliance support+19mo ago22-01-2026 16:52

Missing Authorization vulnerability in Ninja Team GDPR CCPA Compliance Support ninja-gdpr-compliance allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects GDPR CCPA Compliance Support: from n/a through <= 2.7.4.CVE-2025-26977ninja teamfilebird+21y ago25-02-2025 14:17

Authorization Bypass Through User-Controlled Key vulnerability in Ninja Team Filebird filebird allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Filebird: from n/a through <= 6.4.2.1.CVE-2025-48260ninja teamgdpr ccpa compliance support+11y ago19-05-2025 14:45

Missing Authorization vulnerability in Ninja Team GDPR CCPA Compliance Support ninja-gdpr-compliance allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects GDPR CCPA Compliance Support: from n/a through <= 2.7.3.CVE-2025-31092ninja teamclick to chat – wp support all-in-one floating widget+11y ago27-03-2025 23:21

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Ninja Team Click to Chat – WP Support All-in-One Floating Widget support-chat allows Stored XSS.This issue affects Click to Chat – WP Support All-in-One Floating Widget: from n/a through <= 2.3.4.CVE-2025-24591ninja teamgdpr ccpa compliance support+21y ago24-01-2025 17:24

Missing Authorization vulnerability in Ninja Team GDPR CCPA Compliance Support ninja-gdpr-compliance allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects GDPR CCPA Compliance Support: from n/a through <= 2.7.1.CVE-2024-54269ninja teamnotibar+11y ago11-12-2024 09:34

Missing Authorization vulnerability in Ninja Team Notibar notibar allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Notibar: from n/a through <= 2.1.4.CVE-2024-47331ninja teammulti step for contact form+22y ago11-10-2024 18:20

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Ninja Team Multi Step for Contact Form cf7-multi-step allows SQL Injection.This issue affects Multi Step for Contact Form: from n/a through <= 2.7.7.CVE-2024-37504ninja teamfilebird document library+12y ago10-07-2024 17:46

Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Ninja Team FileBird Document Library.This issue affects FileBird Document Library: from n/a through 2.0.6.CVE-2024-37244ninja teamninja beaver add-ons for beaver builder+12y ago22-07-2024 09:13

Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Ninja Team Ninja Beaver Add-ons for Beaver Builder allows Stored XSS.This issue affects Ninja Beaver Add-ons for Beaver Builder: from n/a through 2.4.5.CVE-2024-53825ninja teamfilebird+21y ago06-12-2024 13:07

Missing Authorization vulnerability in Ninja Team Filebird filebird allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Filebird: from n/a through <= 6.3.2.CVE-2024-49281ninja teamclick to chat – wp support all-in-one floating widget+22y ago17-10-2024 19:15

Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability in Ninja Team Click to Chat – WP Support All-in-One Floating Widget support-chat allows Stored XSS.This issue affects Click to Chat – WP Support All-in-One Floating Widget: from n/a through <= 2.3.3.CVE-2024-35166ninja teamfilebird+12y ago13-05-2024 09:09

Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Ninja Team Filebird.This issue affects Filebird: from n/a through 5.6.3.CVE-2026-52703ninja teamfastdup+14mo ago15-06-2026 20:19

Unauthenticated Path Traversal in FastDup <= 2.7.2 versions.CVE-2023-51406ninja teamfastdup – fastest wordpress migration & duplicator+22y ago08-01-2024 20:41

Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Ninja Team FastDup – Fastest WordPress Migration & Duplicator.This issue affects FastDup – Fastest WordPress Migration & Duplicator: from n/a through 2.1.7.CVE-2023-25966ninja teamfilebird+21y ago09-12-2024 11:31

Missing Authorization vulnerability in Ninja Team Filebird allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Filebird: from n/a through 5.1.4.