NinjaTeam vulnerabilities
31 published CVEs name NinjaTeam among the affected products.
- Published CVEs
- 31
- Last 12 months
- 7
- Critical
- 1
- Known exploited
- 0
Critical 1High 6Medium 24Low 0Not scored 0
CVEs per yearBy the year they were published
- 20232
- 202416
- 20259
- 20264
Newest CVEs
- CVE-2026-15004
FileBird – WordPress Media Library Folders & File Manager <= 6.5.6 - Authenticated (Author+) Stored Cross-Site Scripting
ninjateam · FileBird – WordPress Media Library Folders & File Manager
Medium5.4 - CVE-2026-1104
FastDup – Fastest WordPress Migration & Duplicator <= 2.7.1 - Missing Authorization to Authenticated (Contributor+) Backup Creation and Download
ninjateam · FastDup – Fastest WordPress Migration & Duplicator
High8.8 - CVE-2025-14001
WP Duplicate Page <= 1.8 - Missing Authorization to Authenticated (Contributor+) Arbitrary Post Duplication
ninjateam · WP Duplicate Page
Medium5.4 - CVE-2026-0604
FastDup <= 2.7 - Authenticated (Contributor+) Path Traversal via 'dir_path' REST Parameter
ninjateam · FastDup – Fastest WordPress Migration & Duplicator
Medium6.5 - CVE-2025-66134
WordPress FileBird Pro plugin <= 6.5.1 - Broken Access Control vulnerability
NinjaTeam · FileBird Pro
Medium5.4 - CVE-2025-12900
FileBird – WordPress Media Library Folders & File Manager <= 6.5.1 - Missing Authorization to Authenticated (Author+) Global Folders Tampering
ninjateam · FileBird – WordPress Media Library Folders & File Manager
Medium4.3 - CVE-2025-12481
WP Duplicate Page <= 1.7 - Missing Authorization to Authenticated (Contributor+) Sensitive Information Disclosure
ninjateam · WP Duplicate Page
Medium4.3 - CVE-2025-11510
FileBird <= 6.4.9 - Improper Authorization to Authenticated (Author+) Settings Reset
ninjateam · FileBird – WordPress Media Library Folders & File Manager
Medium4.3 - CVE-2025-0818
Multiple elFinder Plugins <= (Various Versions) - Directory Traversal to Arbitrary File Deletion
ninjateam · File Manager Pro – Filester
Medium6.5 - CVE-2025-6986
FileBird – WordPress Media Library Folders & File Manager <= 6.4.8 - Authenticated (Author+) SQL Injection
ninjateam · FileBird – WordPress Media Library Folders & File Manager
Medium6.5
Products with the most CVEs
- FileBird – WordPress Media Library Folders & File Manager7
- File Manager Pro – Filester6
- WP Chat App4
- FastDup – Fastest WordPress Migration & Duplicator2
- GDPR CCPA Compliance & Cookie Consent Banner2
- Notibar – Notification Bar for WordPress2
- WP Duplicate Page2
- WP Telegram Chat Widget2
- Database for Contact Form 71
- FileBird Pro1
Most common weaknesses
- CWE-79 Cross-site scripting (XSS)12
- CWE-862 Missing authorization9
- CWE-22 Path traversal3
- CWE-434 Unrestricted file upload2
- CWE-20 Improper input validation1
- CWE-285 Improper authorization1
- CWE-502 Deserialization of untrusted data1
- CWE-639 Authorization bypass through a user-controlled key (IDOR)1
- CWE-89 SQL injection1
- CWE-94 Code injection1