WPManageNinja vulnerabilities
28 published CVEs name WPManageNinja among the affected products.
- 28Published CVEs28 of them scored
- 27Last 12 monthspublished in the last year
- 2Critical12 more rated high
- 0Known exploitedin CISA's KEV catalog
Newest CVEs
- CVE-2026-119213
Fluent Support <= 2.4.7 — Unauthenticated Limited Modification of Linked Customer Profile Fields via Fluent Forms Feed
wpmanageninja · Fluent Support – Helpdesk & Customer Support Ticket System
Low3.7 - CVE-2026-120577
FluentCart A New Era of eCommerce <= 1.6.2 - Authenticated (Custom+) Arbitrary File Deletion via 'file_path' Parameter
wpmanageninja · FluentCart A New Era of eCommerce – Faster, Lighter, and Simpler
High8.1 - CVE-2026-103525
FluentCart A New Era of eCommerce <= 1.7.0 - Insecure Direct Object Reference to Unauthenticated Sensitive Information Disclosure via 'order_id' and 'billing_address_id' Parameters
wpmanageninja · FluentCart A New Era of eCommerce – Faster, Lighter, and Simpler
High7.5 - CVE-2026-103518
FluentCart A New Era of eCommerce <= 1.7.0 - Authenticated (Administrator+) SQL Injection via 'products.variants' Array Keys
wpmanageninja · FluentCart A New Era of eCommerce – Faster, Lighter, and Simpler
Medium4.9 - CVE-2026-109695
WordPress FluentCart plugin <= 1.7.1 - Sensitive Data Exposure vulnerability
WPManageNinja · FluentCart
High7.5 - CVE-2026-108484
WordPress Best Payments Plugin for WP plugin <= 4.6.27 - Cross Site Scripting (XSS) vulnerability
WPManageNinja · Best Payments Plugin for WP
High7.1 - CVE-2026-15178
Fluent Forms <= 6.2.5 - Missing Authorization to Authenticated (Custom+) Sensitive Data Exposure and Modification
wpmanageninja · Fluent Forms – Customizable Contact Forms, Survey, Quiz, & Conversational Form Builder
Medium5.4 - CVE-2026-101324
Fluent Forms <= 6.2.14 - Reflected Cross-Site Scripting via '{get.*}' Editor SmartCode Parameter
wpmanageninja · Fluent Forms – Customizable Contact Forms, Survey, Quiz, & Conversational Form Builder
Medium4.7 - CVE-2026-94679
WordPress Fluent Support plugin <= 2.3.2 - Broken Access Control vulnerability
WPManageNinja · Fluent Support
Medium5.4 - CVE-2026-66633
WordPress Fluent Forms Pro Add On Pack plugin < 6.2.12 - Cross Site Scripting (XSS) vulnerability
WPManageNinja · Fluent Forms Pro Add On Pack
High7.1