Wpmanageninja Ninja Tables — known CVE vulnerabilities

Every CVE whose affected-product data names Wpmanageninja Ninja Tables, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (10)

• CVE-2025-2940 — CVSS 7.2 (high): The Ninja Tables – Easy Data Table Builder plugin for WordPress is vulnerable to Server-Side Request Forgery in all versions up to, and…
• CVE-2024-7304 — CVSS 6.4 (medium): The Ninja Tables – Easiest Data Table Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via SVG File uploads in…
• CVE-2022-47137 — CVSS 5.9 (medium): Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in WPManageNinja LLC Ninja Tables plugin <= 4.3.4 versions.
• CVE-2025-2939 — CVSS 5.6 (medium): The Ninja Tables – Easy Data Table Builder plugin for WordPress is vulnerable to PHP Object Injection in all versions up to, and…
• CVE-2024-12772 — CVSS 5.4 (medium): The Ninja Tables WordPress plugin before 5.0.17 does not sanitize and escape a parameter before outputting it back in the page when…
• CVE-2024-23504 — CVSS 5.3 (medium): Missing Authorization vulnerability in WPManageNinja LLC Ninja Tables.This issue affects Ninja Tables: from n/a through 5.0.5.
• CVE-2021-24900 — CVSS 4.8 (medium): The Ninja Tables WordPress plugin before 4.1.8 does not sanitise and escape some of its table fields, which could allow high privilege…
• CVE-2024-35635 — CVSS 4.4 (medium): Server-Side Request Forgery (SSRF) vulnerability in WPManageNinja LLC Ninja Tables.This issue affects Ninja Tables: from n/a through 5.0.9.
• CVE-2024-23503 — CVSS 4.3 (medium): Missing Authorization vulnerability in WPManageNinja LLC Ninja Tables.This issue affects Ninja Tables: from n/a through 5.0.6.
• CVE-2022-47136 — CVSS 4.3 (medium): Cross-Site Request Forgery (CSRF) vulnerability in WPManageNinja LLC Ninja Tables – Best Data Table Plugin for WordPress plugin <= 4.3.4…