Vendor

    Ninja Team

    17 known vulnerabilities in products by Ninja Team, 0 of them actively exploited (CISA KEV).

    Key figures

    17

    Vulnerabilities

    0

    Actively exploited (KEV)

    0

    Used by ransomware

    3

    Critical

    Vulnerabilities

    Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.

    Vulnerabilities in Ninja Team
    CriticalCVE-2021-24385

    Filebird 4.7.3 - Unauthenticated SQL Injection

    also in 1 other product

    		9.8
    CriticalCVE-2026-52703

    WordPress FastDup plugin <= 2.7.2 - Path Traversal vulnerability

    		9.6
    CriticalCVE-2024-47331

    WordPress Multi Step for Contact Form plugin <= 2.7.7 - Unauthenticated SQL Injection vulnerability

    also in 1 other product

    		9.3
    MediumCVE-2024-49281

    Ninja Team Click to Chat: OS Command Injection

    also in 1 other product

    		6.5
    MediumCVE-2023-25966

    WordPress FileBird plugin <= 5.1.4 - Broken Access Control vulnerability

    also in 1 other product

    		5.5
    MediumCVE-2025-68073

    WordPress GDPR CCPA Compliance Support plugin <= 2.7.4 - Broken Access Control vulnerability

    		6.5
    HighCVE-2024-35166

    Ninja Team Filebird: Exposure of Sensitive Information to an Unauthorized Actor

    also in 1 other product

    		5.3
    HighCVE-2023-51406

    WordPress FastDup Plugin <= 2.1.7 is vulnerable to Sensitive Data Exposure

    also in 1 other product

    		5.3
    HighCVE-2025-24591

    Ninja Team GDPR CCPA Compliance Support: Missing Authorization

    also in 1 other product

    		4.3
    MediumCVE-2024-37504

    WordPress FileBird Document Library plugin <= 2.0.6 - Sensitive Data Exposure vulnerability

    		5.3
    MediumCVE-2025-31092

    Ninja Team Click to Chat: Cross-site Scripting

    		6.5
    MediumCVE-2024-37244

    Ninja Beaver Add-ons for Beaver Builder: Cross-site Scripting

    		6.5
    MediumCVE-2025-52710

    WordPress File Manager Pro plugin <= 1.8.8 - Cross Site Scripting (XSS) Vulnerability

    		5.9
    HighCVE-2024-53825

    WordPress FileBird Lite plugin <= 6.3.2 - Broken Access Control vulnerability

    also in 1 other product

    		4.7
    HighCVE-2025-26977

    WordPress FileBird plugin <= 6.4.2.1 - Insecure Direct Object References (IDOR) vulnerability

    also in 1 other product

    		3.8
    MediumCVE-2025-48260

    WordPress GDPR CCPA Compliance Support plugin <= 2.7.3 - Broken Access Control Vulnerability

    		4.3
    MediumCVE-2024-54269

    WordPress Notibar plugin <= 2.1.4 - Broken Access Control vulnerability

    		4.3

    Products

    Products by Ninja Team
    Filebird40
    Gdpr Ccpa Compliance Support30