Skip to content
CVE Ledger
  • Newest CVEsPage
  • Recently added to KEVPage
  • Rising exploitation (EPSS)Page
  • Weekly digestPage
  • StatisticsPage
  • WatchlistPage
  • API documentationPage
  • MCP serverPage
  • Data sourcesPage
  • Data statusPage
  • ChangelogPage
  • AboutPage
  • How it's builtPage
  • Support the projectPage

NinjaTeam vulnerabilities

31 published CVEs name NinjaTeam among the affected products.

Atom feed of new CVEs

Newest CVEs

  • CVE-2026-15004

    FileBird – WordPress Media Library Folders & File Manager <= 6.5.6 - Authenticated (Author+) Stored Cross-Site Scripting

    ninjateam · FileBird – WordPress Media Library Folders & File Manager

    Medium5.4
  • CVE-2026-1104

    FastDup – Fastest WordPress Migration & Duplicator <= 2.7.1 - Missing Authorization to Authenticated (Contributor+) Backup Creation and Download

    ninjateam · FastDup – Fastest WordPress Migration & Duplicator

    High8.8
  • CVE-2025-14001

    WP Duplicate Page <= 1.8 - Missing Authorization to Authenticated (Contributor+) Arbitrary Post Duplication

    ninjateam · WP Duplicate Page

    Medium5.4
  • CVE-2026-0604

    FastDup <= 2.7 - Authenticated (Contributor+) Path Traversal via 'dir_path' REST Parameter

    ninjateam · FastDup – Fastest WordPress Migration & Duplicator

    Medium6.5
  • CVE-2025-66134

    WordPress FileBird Pro plugin <= 6.5.1 - Broken Access Control vulnerability

    NinjaTeam · FileBird Pro

    Medium5.4
  • CVE-2025-12900

    FileBird – WordPress Media Library Folders & File Manager <= 6.5.1 - Missing Authorization to Authenticated (Author+) Global Folders Tampering

    ninjateam · FileBird – WordPress Media Library Folders & File Manager

    Medium4.3
  • CVE-2025-12481

    WP Duplicate Page <= 1.7 - Missing Authorization to Authenticated (Contributor+) Sensitive Information Disclosure

    ninjateam · WP Duplicate Page

    Medium4.3
  • CVE-2025-11510

    FileBird <= 6.4.9 - Improper Authorization to Authenticated (Author+) Settings Reset

    ninjateam · FileBird – WordPress Media Library Folders & File Manager

    Medium4.3
  • CVE-2025-0818

    Multiple elFinder Plugins <= (Various Versions) - Directory Traversal to Arbitrary File Deletion

    ninjateam · File Manager Pro – Filester

    Medium6.5
  • CVE-2025-6986

    FileBird – WordPress Media Library Folders & File Manager <= 6.4.8 - Authenticated (Author+) SQL Injection

    ninjateam · FileBird – WordPress Media Library Folders & File Manager

    Medium6.5
All 31 in the list