Vulnerabilities in ninjateam

30 results
Vexday analysis

NinjaTeam registra 27 vulnerabilidades no histórico, com 1 crítica, mas nenhuma sob ataque ativo no momento (KEV zero). A fraqueza dominante é XSS (CWE-79), típica de aplicações web, e não há publicações recentes, indicando um perfil de risco estável sem pressão imediata de exploração.

CVE-2025-1672MEDIUMNotibar <= 2.1.5 - Authenticated (Administrator+) Stored Cross-Site ScriptingEPSS 0.3%CVE-2024-11885MEDIUMNinjaTeam Chat for Telegram <= 1.0 - Authenticated (Contributor+) Stored Cross-Site ScriptingEPSS 0.3%CVE-2024-5607MEDIUMGDPR CCPA Compliance & Cookie Consent Banner <= 2.7.0 - Missing Authorization to Settings Update and Stored Cross-Site ScriptingEPSS 0.3%CVE-2026-1104HIGHFastDup – Fastest WordPress Migration & Duplicator <= 2.7.1 - Missing Authorization to Authenticated (Contributor+) Backup Creation and DownloadEPSS 0.3%CVE-2025-11510MEDIUMFileBird <= 6.4.9 - Improper Authorization to Authenticated (Author+) Settings ResetEPSS 0.2%CVE-2025-12481MEDIUMWP Duplicate Page <= 1.7 - Missing Authorization to Authenticated (Contributor+) Sensitive Information DisclosureEPSS 0.2%CVE-2025-12900MEDIUMFileBird – WordPress Media Library Folders & File Manager <= 6.5.1 - Missing Authorization to Authenticated (Author+) Global Folders TamperingEPSS 0.2%CVE-2025-5236MEDIUMNinjaTeam Chat for Telegram <= 1.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via username ParameterEPSS 0.2%CVE-2025-14001MEDIUMWP Duplicate Page <= 1.8 - Missing Authorization to Authenticated (Contributor+) Arbitrary Post DuplicationEPSS 0.2%CVE-2025-66134MEDIUMWordPress FileBird Pro plugin <= 6.5.1 - Broken Access Control vulnerabilityEPSS 0.2%