Vulnerabilities > Wpmanageninja > Ninja Tables

DATE CVE VULNERABILITY TITLE RISK
2024-08-27 CVE-2024-7304 Cross-site Scripting vulnerability in Wpmanageninja Ninja Tables
The Ninja Tables – Easiest Data Table Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via SVG File uploads in all versions up to, and including, 5.0.12 due to insufficient input sanitization and output escaping.
network
low complexity
wpmanageninja CWE-79
5.4
2024-06-14 CVE-2024-23504 Missing Authorization vulnerability in Wpmanageninja Ninja Tables
Missing Authorization vulnerability in WPManageNinja LLC Ninja Tables.This issue affects Ninja Tables: from n/a through 5.0.5.
network
low complexity
wpmanageninja CWE-862
5.3
2024-06-11 CVE-2024-23503 Missing Authorization vulnerability in Wpmanageninja Ninja Tables
Missing Authorization vulnerability in WPManageNinja LLC Ninja Tables.This issue affects Ninja Tables: from n/a through 5.0.6.
network
low complexity
wpmanageninja CWE-862
4.3
2023-05-25 CVE-2022-47136 Cross-Site Request Forgery (CSRF) vulnerability in Wpmanageninja Ninja Tables
Cross-Site Request Forgery (CSRF) vulnerability in WPManageNinja LLC Ninja Tables – Best Data Table Plugin for WordPress plugin <= 4.3.4 versions.
network
low complexity
wpmanageninja CWE-352
8.8
2023-05-10 CVE-2022-47137 Cross-site Scripting vulnerability in Wpmanageninja Ninja Tables
Auth.
network
low complexity
wpmanageninja CWE-79
4.8
2022-02-01 CVE-2021-24900 Cross-site Scripting vulnerability in Wpmanageninja Ninja Tables
The Ninja Tables WordPress plugin before 4.1.8 does not sanitise and escape some of its table fields, which could allow high privilege users to perform Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed
3.5