Log in Start free

NinjaTeam

Products

ProductCVEsExploitedLatest
FileBird – WordPress Media Library Folders & File Manager7–Sep 18, 2026
File Manager Pro – Filester6–Aug 13, 2025
WP Chat App4–Nov 16, 2024
FastDup – Fastest WordPress Migration & Duplicator2–Feb 12, 2026
GDPR CCPA Compliance & Cookie Consent Banner2–Jun 7, 2024
Notibar – Notification Bar for WordPress2–Mar 6, 2025
WP Duplicate Page2–Jan 13, 2026
WP Telegram Chat Widget2–May 30, 2025
Live Chat with Facebook Messenger1–Oct 24, 2023
FileBird Pro1–Dec 16, 2025
Database for Contact Form 71–Mar 19, 2024
WP Click to Chat – Email, Live Chat, Call & Book Now Buttons1–Oct 18, 2024

Exploited and recent CVEs

  • CVE-2026-15004 Medium 5.4 FileBird – WordPress Media Library Folders & File Manager <= 6.5.6 - Authenticated (Author+) Stored Cross-Site Scripting 0.3%
  • CVE-2026-1104 High 8.8 FastDup – Fastest WordPress Migration & Duplicator <= 2.7.1 - Missing Authorization to Authenticated (Contributor+) Backup Creation and Download 0.3%
  • CVE-2025-14001 Medium 5.4 WP Duplicate Page <= 1.8 - Missing Authorization to Authenticated (Contributor+) Arbitrary Post Duplication 0.2%
  • CVE-2026-0604 Medium 6.5 FastDup <= 2.7 - Authenticated (Contributor+) Path Traversal via 'dir_path' REST Parameter 0.4%
  • CVE-2025-66134 Medium 5.4 WordPress FileBird Pro plugin <= 6.5.1 - Broken Access Control vulnerability 0.2%
  • CVE-2025-12900 Medium 4.3 FileBird – WordPress Media Library Folders & File Manager <= 6.5.1 - Missing Authorization to Authenticated (Author+) Global Folders Tampering 0.2%
  • CVE-2025-12481 Medium 4.3 WP Duplicate Page <= 1.7 - Missing Authorization to Authenticated (Contributor+) Sensitive Information Disclosure 0.3%
  • CVE-2025-11510 Medium 4.3 FileBird <= 6.4.9 - Improper Authorization to Authenticated (Author+) Settings Reset 0.3%
  • CVE-2025-0818 Medium 6.5 Multiple elFinder Plugins <= (Various Versions) - Directory Traversal to Arbitrary File Deletion 1.0%
  • CVE-2025-6986 Medium 6.5 FileBird – WordPress Media Library Folders & File Manager <= 6.4.8 - Authenticated (Author+) SQL Injection 0.4%
  • CVE-2025-3234 High 7.2 File Manager Pro – Filester <= 1.8.8 - Authenticated (Administrator+) Arbitrary File Upload 0.6%
  • CVE-2025-5236 Medium 6.4 NinjaTeam Chat for Telegram <= 1.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via username Parameter 0.3%
  • CVE-2025-1672 Medium 5.5 Notibar <= 2.1.5 - Authenticated (Administrator+) Stored Cross-Site Scripting 0.3%
  • CVE-2024-11885 Medium 6.4 NinjaTeam Chat for Telegram <= 1.0 - Authenticated (Contributor+) Stored Cross-Site Scripting 0.3%
  • CVE-2024-12331 Medium 4.3 File Manager Pro – Filester <= 1.8.6 - Missing Authorization to Authenticated (Subscriber+) Filebird Plugin Installation 0.3%
  • CVE-2024-11012 Medium 6.3 Notibar – Notification Bar for WordPress <= 2.1.4 - Authenticated (Subscriber+) Arbitrary Shortcode Execution via njt_nofi_text 0.5%
  • CVE-2024-9669 High 7.2 File Manager Pro – Filester <= 1.8.5 - Authenticated (Administrator+) Local JavaScript File Inclusion 1.0%
  • CVE-2024-8066 High 7.5 File Manager Pro – Filester <= 1.8.6- Authenticated (Subscriber+) Arbitrary File Upload 1.1%
  • CVE-2024-10533 Medium 4.3 WP Chat App <= 3.6.8 - Missing Authorization to Authenticated (Subscriber+) Filebird Plugin Installation 0.5%
  • CVE-2024-10055 Medium 6.4 Click to Chat – WP Support All-in-One Floating Widget <= 2.3.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via wpsaio_snapchat Shortcode 0.3%
  • CVE-2024-7031 High 7.5 File Manager Pro – Filester <= 1.8.2 - Authenticated Plugin Settings Update 0.6%
  • CVE-2024-5607 Medium 5.4 GDPR CCPA Compliance & Cookie Consent Banner <= 2.7.0 - Missing Authorization to Settings Update and Stored Cross-Site Scripting 0.3%
  • CVE-2024-2346 Medium 5.4 FileBird – WordPress Media Library Folders & File Manager <= 5.6.3 - Authenticated (Author+) Insecure Direct Object Reference 0.3%
  • CVE-2024-2345 Medium 6.4 FileBird – WordPress Media Library Folders & File Manager <= 5.6.3 - Authenticated (Author+) Stored Cross-Site Scripting 0.3%
  • CVE-2024-2513 Medium 6.4 WP Chat App <= 3.6.2 - Authenticated(Contributor+) Stored Cross-Site Scripting via Block Image Attribute 0.4%
  • CVE-2024-29103 High 7.1 WordPress Database for Contact Form 7 plugin <= 3.0.6 - Unauthenticated Cross Site Scripting (XSS) vulnerability 0.3%
  • CVE-2024-1761 Medium 6.4 WP Chat App <= 3.6.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via Block Attributes 0.4%
  • CVE-2023-51370 Medium 5.9 WordPress WP Chat App Plugin <= 3.4.4 is vulnerable to Cross Site Scripting (XSS) 0.3%
  • CVE-2024-0691 Medium 5.5 FileBird <= 5.6.0 - Authenticated(Administrator+) Stored Cross-Site Scripting via Folder Import 0.4%
  • CVE-2023-5740 Medium 6.4 Live Chat with Facebook Messenger <= 1.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode 0.6%