Vendor

    Ninja Team

    52 known vulnerabilities in products by Ninja Team, 0 of them actively exploited (CISA KEV).

    Key figures

    52

    Vulnerabilities

    0

    Actively exploited (KEV)

    0

    Used by ransomware

    4

    Critical

    Vulnerabilities

    Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.

    Vulnerabilities in Ninja Team
    HighCVE-2023-4827

    File Manager Pro < 1.8 - Remote Code Execution via CSRF

    		8.8
    CriticalCVE-2021-24385

    Filebird 4.7.3 - Unauthenticated SQL Injection

    also in 1 other product

    		9.8
    CriticalCVE-2020-36718

    GDPR CCPA Compliance Support <= 2.3 - PHP Object Injection

    		9.8
    CriticalCVE-2020-24142

    NinjaTeam Video Downloader For Tiktok: Server-Side Request Forgery (SSRF)

    		9.8
    HighCVE-2020-24143

    NinjaTeam Video Downloader For Tiktok: Path Traversal

    		7.5
    HighCVE-2023-4861

    File Manager Pro < 1.8.1 - Admin+ Remote Code Execution

    		7.2
    HighCVE-2024-8066

    File Manager Pro – Filester <= 1.8.6- Authenticated (Subscriber+) Arbitrary File Upload

    		7.5
    MediumCVE-2025-0818

    Multiple elFinder Plugins <= (Various Versions) - Directory Traversal to Arbitrary File Deletion

    also in 2 other products

    		6.5
    HighCVE-2024-9669

    NinjaTeam File Manager Pro: Path Traversal

    		7.2
    CriticalCVE-2024-47331

    WordPress Multi Step for Contact Form plugin <= 2.7.7 - Unauthenticated SQL Injection vulnerability

    also in 1 other product

    		9.3
    HighCVE-2025-3234

    File Manager Pro – Filester <= 1.8.8 - Authenticated (Administrator+) Arbitrary File Upload

    		7.2
    HighCVE-2026-116753

    Ninja Team Multi Step for Contact Form 7: Cross-site Scripting

    		7.2
    HighCVE-2024-7031

    File Manager Pro – Filester <= 1.8.2 - Authenticated Plugin Settings Update

    		7.5
    HighCVE-2026-1104

    NinjaTeam FastDup: Missing Authorization

    		8.8
    MediumCVE-2023-6592

    FastDup: security vulnerability

    		5.3
    MediumCVE-2026-15004

    NinjaTeam FileBird: Cross-site Scripting

    		5.4
    MediumCVE-2024-49281

    Ninja Team Click to Chat: OS Command Injection

    also in 1 other product

    		6.5
    MediumCVE-2023-5740

    NinjaTeam Live Chat with Facebook Messenger: Cross-site Scripting

    		6.4
    MediumCVE-2023-25966

    WordPress FileBird plugin <= 5.1.4 - Broken Access Control vulnerability

    also in 1 other product

    		5.5
    MediumCVE-2025-6986

    NinjaTeam FileBird: SQL Injection

    		6.5
    MediumCVE-2026-0604

    FastDup <= 2.7 - Authenticated (Contributor+) Path Traversal via 'dir_path' REST Parameter

    		6.5
    MediumCVE-2024-11012

    NinjaTeam Notibar: Code Injection

    		6.3
    HighCVE-2024-35166

    Ninja Team Filebird: Exposure of Sensitive Information to an Unauthorized Actor

    also in 1 other product

    		5.3
    MediumCVE-2024-2837

    WP Chat App < 3.6.4 - Admin+ Stored XSS

    		5.4
    HighCVE-2024-29103

    NinjaTeam Database for Contact Form 7: Cross-site Scripting

    		7.1

    All vulnerabilities in search

    Products

    Products by Ninja Team
    WP Chat App100
    Ninja Team Filebird80
    Filebird – Wordpress Media Library Folders & File Manager70
    File Manager Pro70
    File Manager Pro – Filester60
    Gdpr Ccpa Compliance & Cookie Consent Banner40
    Wp Duplicate Page30