PatchTheCVEninjateam vulnerabilities
Recent CVEs affecting ninjateam products. 21 tracked.
ninjateam has 21 tracked vulnerabilities, 1 critical. A fixed release or vendor patch exists for 21. Most recent: 2025-05-30. Highest priority: CVE-2024-47331 (score 50/100).
- CVE-2025-5236 MEDIUM 6.4 UPGRADE The NinjaTeam Chat for Telegram plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘use
- CVE-2025-26977 LOW 3.8 UPGRADE Authorization Bypass Through User-Controlled Key vulnerability in Ninja Team Filebird filebird allows Exploiti
- CVE-2025-24591 MEDIUM 4.3 UPGRADE Missing Authorization vulnerability in Ninja Team GDPR CCPA Compliance Support ninja-gdpr-compliance allows Ex
- CVE-2024-9669 HIGH 7.2 UPGRADE The File Manager Pro – Filester plugin for WordPress is vulnerable to Local JavaScript File Inclusion in all v
- CVE-2024-8066 HIGH 7.5 UPGRADE The File Manager Pro – Filester plugin for WordPress is vulnerable to arbitrary file uploads due to missing va
- CVE-2024-6617 MEDIUM 4.8 UPGRADE The NinjaTeam Header Footer Custom Code WordPress plugin before 1.2 does not sanitise and escape some of its s
- CVE-2024-6493 MEDIUM 4.8 UPGRADE The NinjaTeam Header Footer Custom Code WordPress plugin before 1.2 does not sanitise and escape some of its s
- CVE-2024-5607 MEDIUM 5.4 UPGRADE The GDPR CCPA Compliance & Cookie Consent Banner plugin for WordPress is vulnerable to unauthorized modificati
- CVE-2024-53825 MEDIUM 4.7 UPGRADE Missing Authorization vulnerability in Ninja Team Filebird filebird allows Exploiting Incorrectly Configured A
- CVE-2024-4664 MEDIUM 4.8 UPGRADE The WP Chat App WordPress plugin before 3.6.5 does not sanitise and escape some of its settings, which could a
- CVE-2024-49281 MEDIUM 6.5 UPGRADE Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability in Ni
- CVE-2024-47331 CRITICAL 9.3 UPGRADE Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Ninja Te
- CVE-2024-35166 MEDIUM 5.3 UPGRADE Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Ninja Team Filebird.This issue aff
- CVE-2024-2837 MEDIUM 5.4 UPGRADE The WP Chat App WordPress plugin before 3.6.4 does not sanitise and escape some of its settings, which could a
- CVE-2024-2513 MEDIUM 6.4 UPGRADE The WP Chat App plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'imageAlt' block att
- CVE-2024-2346 MEDIUM 5.4 UPGRADE The FileBird – WordPress Media Library Folders & File Manager plugin for WordPress is vulnerable to Insecure D
- CVE-2024-2345 MEDIUM 6.4 UPGRADE The FileBird – WordPress Media Library Folders & File Manager plugin for WordPress is vulnerable to Stored Cro
- CVE-2024-12331 MEDIUM 4.3 UPGRADE The File Manager Pro – Filester plugin for WordPress is vulnerable to unauthorized modification of data due to
- CVE-2024-10533 MEDIUM 4.3 UPGRADE The WP Chat App plugin for WordPress is vulnerable to unauthorized plugin installation due to a missing capabi
- CVE-2024-10055 MEDIUM 6.4 UPGRADE The Click to Chat – WP Support All-in-One Floating Widget plugin for WordPress is vulnerable to Stored Cross-S
- CVE-2023-25966 MEDIUM 5.5 UPGRADE Missing Authorization vulnerability in Ninja Team Filebird allows Exploiting Incorrectly Configured Access Con
FAQ
How do I fix ninjateam vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is ninjateam being exploited right now?
None of the tracked ninjateam CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which ninjateam CVE should I patch first?
CVE-2024-47331 currently ranks highest (50/100): Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Ninja Te.