Vendor

    WPManageNinja

    49 known vulnerabilities in products by WPManageNinja, 0 of them actively exploited (CISA KEV).

    Key figures

    49

    Vulnerabilities

    0

    Actively exploited (KEV)

    0

    Used by ransomware

    3

    Critical

    Vulnerabilities

    Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.

    Vulnerabilities in WPManageNinja
    HighCVE-2022-2544

    Ninja Job Board < 1.3.3 - Resume Disclosure via Directory Listing

    		7.5
    CriticalCVE-2026-73532

    Fluent Forms Pro 6.2.7 Embedded Malicious Code via Tampered Plugin Build

    		9.8
    CriticalCVE-2026-73533

    Ninja Tables Pro 5.2.11 Embedded Malicious Code via Tampered Plugin Build

    		9.8
    HighCVE-2026-120577

    Path Traversal (CVE-2026-120577)

    		8.1
    HighCVE-2022-2559

    Fluent Support < 1.5.8 - Admin+ SQLi

    		7.2
    HighCVE-2026-103525

    Authorization Bypass Through User-Controlled Key (CVE-2026-103525)

    		7.5
    HighCVE-2026-16636

    Cross-site Scripting (CVE-2026-16636)

    		7.2
    HighCVE-2026-16655

    Cross-site Scripting (CVE-2026-16655)

    		7.2
    HighCVE-2026-18146

    Cross-site Scripting (CVE-2026-18146)

    		7.2
    HighCVE-2026-109695

    WordPress FluentCart plugin <= 1.7.1 - Sensitive Data Exposure vulnerability

    		7.5
    MediumCVE-2026-17567

    Authorization Bypass Through User-Controlled Key (CVE-2026-17567)

    		5.3
    HighCVE-2026-108484

    WordPress Best Payments Plugin for WP plugin <= 4.6.27 - Cross Site Scripting (XSS) vulnerability

    		7.1
    HighCVE-2022-4746

    FluentAuth < 1.0.2 - Bypass blocks by IP Spoofing

    		7.5
    MediumCVE-2026-103518

    SQL Injection (CVE-2026-103518)

    		4.9
    MediumCVE-2023-1430

    WPManageNinja Fluentcrm: Use of a One-Way Hash without a Salt

    also in 1 other product

    		6.5
    HighCVE-2026-66633

    WordPress Fluent Forms Pro Add On Pack plugin < 6.2.12 - Cross Site Scripting (XSS) vulnerability

    		7.1
    HighCVE-2026-61964

    WordPress Ninja Tables plugin <= 5.2.9 - Cross Site Scripting (XSS) vulnerability

    		7.1
    MediumCVE-2026-17571

    Fluent Forms <= 6.2.8 - Reflected Cross-Site Scripting via 'param'

    		6.1
    HighCVE-2024-47304

    WordPress Fluent Support plugin <= 1.8.0 - SQL Injection vulnerability

    also in 1 other product

    		8.5
    MediumCVE-2026-15665

    WPManageNinja Fluent Support: Cross-site Scripting

    		6.4
    HighCVE-2023-51547

    WordPress Fluent Support Plugin <= 1.7.6 is vulnerable to SQL Injection

    also in 1 other product

    		7.6
    HighCVE-2023-3087

    FluentSMTP <= 2.2.4 - Unauthenticated Stored Cross-Site Scripting via Email Subject

    also in 1 other product

    		7.2
    HighCVE-2026-57715

    WordPress Fluent CRM plugin <= 3.1.7 - Cross Site Scripting (XSS) vulnerability

    		7.1
    MediumCVE-2026-15178

    Missing Authorization (CVE-2026-15178)

    		5.4
    HighCVE-2024-13568

    Techjewel Fluent Support: Exposure of Sensitive Information to an Unauthorized Actor

    also in 1 other product

    		7.5

    All vulnerabilities in search

    Products

    Products by WPManageNinja
    WPManageNinja Ninja Tables120
    Fluent Forms – Customizable Contact Forms, Survey, Quiz, & Conversational Form Builder70
    WPManageNinja Fluent Support70
    Fluentcart A New Era Of Ecommerce – Faster, Lighter, And Simpler40
    FluentSMTP30