Log in Start free

Ninja Team

Products

ProductCVEsExploitedLatest
Filebird4–Feb 25, 2025
GDPR CCPA Compliance Support3–Jan 22, 2026
Click to Chat – WP Support All-in-One Floating Widget2–Mar 27, 2025
File Manager Pro1–Jun 20, 2025
FileBird – WordPress Media Library Folders & File Manager1–Jul 12, 2021
FileBird Document Library1–Jul 10, 2024
Multi Step for Contact Form1–Oct 11, 2024
Ninja Beaver Add-ons for Beaver Builder1–Jul 22, 2024
Notibar1–Dec 11, 2024
FastDup1–Jun 15, 2026
FastDup – Fastest WordPress Migration & Duplicator1–Jan 8, 2024

Exploited and recent CVEs

  • CVE-2026-52703 Critical 9.6 WordPress FastDup plugin <= 2.7.2 - Path Traversal vulnerability 0.4%
  • CVE-2025-68073 Medium 6.5 WordPress GDPR CCPA Compliance Support plugin <= 2.7.4 - Broken Access Control vulnerability 0.3%
  • CVE-2025-52710 Medium 5.9 WordPress File Manager Pro plugin <= 1.8.8 - Cross Site Scripting (XSS) Vulnerability 0.2%
  • CVE-2025-48260 Medium 4.3 WordPress GDPR CCPA Compliance Support plugin <= 2.7.3 - Broken Access Control Vulnerability 0.3%
  • CVE-2025-31092 Medium 6.5 WordPress Click to Chat – WP Support All-in-One Floating Widget plugin <= 2.3.4 - Cross Site Scripting (XSS) vulnerability 0.2%
  • CVE-2025-26977 Low 3.8 WordPress FileBird plugin <= 6.4.2.1 - Insecure Direct Object References (IDOR) vulnerability 0.4%
  • CVE-2025-24591 Medium 4.3 WordPress GDPR CCPA Compliance & Cookie Consent Banner plugin <= 2.7.1 - Broken Access Control vulnerability 0.5%
  • CVE-2024-54269 Medium 4.3 WordPress Notibar plugin <= 2.1.4 - Broken Access Control vulnerability 0.3%
  • CVE-2023-25966 Medium 5.5 WordPress FileBird plugin <= 5.1.4 - Broken Access Control vulnerability 0.6%
  • CVE-2024-53825 Medium 4.7 WordPress FileBird Lite plugin <= 6.3.2 - Broken Access Control vulnerability 0.4%
  • CVE-2024-49281 Medium 6.5 WordPress Click to Chat – WP Support All-in-One Floating Widget plugin <= 2.3.3 - Cross Site Scripting (XSS) vulnerability 0.5%
  • CVE-2024-47331 Critical 9.3 WordPress Multi Step for Contact Form plugin <= 2.7.7 - Unauthenticated SQL Injection vulnerability 0.6%
  • CVE-2024-37244 Medium 6.5 WordPress Ninja Beaver Add-ons for Beaver Builder plugin <= 2.4.5 - Cross Site Scripting (XSS) vulnerability 0.2%
  • CVE-2024-37504 Medium 5.3 WordPress FileBird Document Library plugin <= 2.0.6 - Sensitive Data Exposure vulnerability 0.4%
  • CVE-2024-35166 Medium 5.3 WordPress FileBird – WordPress Media Library Folders & File Manager plugin <= 5.6.3 - Sensitive Data Exposure vulnerability 0.6%
  • CVE-2023-51406 Medium 5.3 WordPress FastDup Plugin <= 2.1.7 is vulnerable to Sensitive Data Exposure 0.5%
  • CVE-2021-24385 Unrated Filebird 4.7.3 - Unauthenticated SQL Injection 2.8%