Wpmanageninja vulnerabilities
35 CVEs and advisories name Wpmanageninja as an affected vendor, newest first. Follow it as a feed.
- CVE-2026-119213Fluent Support <= 2.4.7 — Unauthenticated Limited Modification of Linked Customer Profile Fields via Fluent Forms Feed
- CVE-2026-120577FluentCart A New Era of eCommerce <= 1.6.2 - Authenticated (Custom+) Arbitrary File Deletion via 'file_path' Parameter
- CVE-2026-103525FluentCart A New Era of eCommerce <= 1.7.0 - Insecure Direct Object Reference to Unauthenticated Sensitive Information Disclosure via 'order_id' and 'billing_address_id' Parameters
- CVE-2026-103518FluentCart A New Era of eCommerce <= 1.7.0 - Authenticated (Administrator+) SQL Injection via 'products.variants' Array Keys
- CVE-2026-109695WordPress FluentCart plugin <= 1.7.1 - Sensitive Data Exposure vulnerability
- CVE-2026-108484WordPress Best Payments Plugin for WP plugin <= 4.6.27 - Cross Site Scripting (XSS) vulnerability
- CVE-2026-15178Fluent Forms <= 6.2.5 - Missing Authorization to Authenticated (Custom+) Sensitive Data Exposure and Modification
- CVE-2026-101324Fluent Forms <= 6.2.14 - Reflected Cross-Site Scripting via '{get.*}' Editor SmartCode Parameter
- CVE-2026-94679WordPress Fluent Support plugin <= 2.3.2 - Broken Access Control vulnerability
- CVE-2026-66633WordPress Fluent Forms Pro Add On Pack plugin < 6.2.12 - Cross Site Scripting (XSS) vulnerability
- CVE-2026-73532Fluent Forms Pro 6.2.7 Embedded Malicious Code via Tampered Plugin Build
- CVE-2026-73533Ninja Tables Pro 5.2.11 Embedded Malicious Code via Tampered Plugin Build
- CVE-2026-66467WordPress FluentCommunity plugin <= 2.7.5 - Cross Site Scripting (XSS) vulnerability
- CVE-2026-18146Fluent Forms <= 6.2.11 - Unauthenticated Stored Cross-Site Scripting via Notification Smartcode Values
- CVE-2026-61964WordPress Ninja Tables plugin <= 5.2.9 - Cross Site Scripting (XSS) vulnerability
- CVE-2026-16636FluentSMTP <= 2.2.95 - Unauthenticated Stored Cross-Site Scripting via Recipient Display Name (to.name) in Email Logs
- CVE-2026-17571Fluent Forms <= 6.2.8 - Reflected Cross-Site Scripting via 'param'
- CVE-2026-17567Fluent Forms <= 6.2.8 - Unauthenticated Sensitive Information Exposure via Insecure Direct Object Reference and Weak Transaction Hash in 'transaction' Parameter
- CVE-2026-16655Fluent Forms <= 6.2.7 - Unauthenticated Stored Cross-Site Scripting via Name Field Nested `password` Member
- CVE-2026-15665Fluent Support <= 2.3.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'redirect-to' Shortcode Attribute
- CVE-2026-65474WordPress Ninja Tables plugin <= 5.2.10 - Sensitive Data Exposure vulnerability
- CVE-2026-65470WordPress Fluent Support plugin <= 2.3.0 - Cross Site Scripting (XSS) vulnerability
- CVE-2026-57715WordPress Fluent CRM plugin <= 3.1.7 - Cross Site Scripting (XSS) vulnerability
- CVE-2026-5069Fluent Forms <= 6.2.1 - Incorrect Authorization to Authenticated (Subscriber+) Arbitrary Subscription Cancellation via 'subscription_id'
- CVE-2026-57638WordPress Fluent Booking plugin <= 2.1.0 - Cross Site Scripting (XSS) vulnerability
- CVE-2026-42655WordPress Best Payments Plugin for WP plugin <= 4.6.19 - Payment Bypass vulnerability
- CVE-2025-67971WordPress FluentCart plugin < 1.3.0 - Cross Site Scripting (XSS) vulnerability
- CVE-2025-13495FluentCart A New Era of eCommerce <= 1.3.1 - Authenticated (Administrator+) SQL Injection via 'groupKey' Parameter
- CVE-2024-23504WordPress Ninja Tables plugin <= 5.0.5 - Broken Access Control vulnerability
- CVE-2024-23503WordPress Ninja Tables plugin <= 5.0.6 - Broken Access Control vulnerability