Vulnerabilities in WP Manage Ninja
11 resultsVexday analysis
WP Manage Ninja apresenta um perfil de risco reduzido com apenas 1 CVE documentada na base, sem atividade de exploração conhecida ou severidade crítica. A vulnerabilidade associada (CWE-352: Cross-Site Request Forgery) é de natureza moderada e não constitui risco imediato, sendo recomendável manter a rotina padrão de patching.
CVE-2021-34620HIGHCSRF in WP Fluent Forms < 3.6.67 allows stored XSS and Privilege EscalationEPSS 2.6%CVE-2026-78276HIGHWordPress Fluent Boards Pro plugin <= 2.0.11 - PHP Object Injection vulnerabilityEPSS 0.5%CVE-2026-78275MEDIUMWordPress Fluent Boards Pro plugin <= 2.0.11 - Arbitrary File Deletion vulnerabilityEPSS 0.5%CVE-2026-78274CRITICALWordPress Fluent Boards Pro plugin <= 2.0.11 - Arbitrary File Upload vulnerabilityEPSS 0.5%CVE-2026-78271HIGHWordPress FluentCRM Pro plugin <= 3.1.12 - Privilege Escalation vulnerabilityEPSS 0.4%CVE-2026-81272MEDIUMWordPress FluentPlayer Pro plugin <= 1.3.2 - Broken Access Control vulnerabilityEPSS 0.3%CVE-2026-81297HIGHWordPress Fluent Forms Pro Add On Pack plugin <= 6.2.12 - Privilege Escalation vulnerabilityEPSS 0.3%CVE-2026-81296HIGHWordPress Fluent Forms Pro Add On Pack plugin <= 6.2.12 - Broken Access Control vulnerabilityEPSS 0.2%CVE-2026-78273MEDIUMWordPress Fluent Boards Pro plugin <= 2.0.11 - Cross Site Scripting (XSS) vulnerabilityEPSS 0.2%CVE-2026-84766MEDIUMWordPress FluentBooking Pro plugin <= 2.2.1 - Bypass Vulnerability vulnerabilityEPSS 0.2%CVE-2026-81273HIGHWordPress FluentBooking Pro plugin <= 2.2.4 - Cross Site Request Forgery (CSRF) vulnerabilityEPSS 0.2%