Ninja Tables

Vulnerabilities

• CVE-2026-73533

  Ninja Tables Pro 5.2.11 Embedded Malicious Code via Tampered Plugin Build

  Critical 9.3

• CVE-2022-47136

  WordPress Ninja Tables Plugin <= 4.3.4 is vulnerable to Cross Site Request Forgery (CSRF)

  High 8.8

• CVE-2025-69351

  WordPress Ninja Tables plugin <= 5.2.4 - SQL Injection vulnerability

  High 8.5

• CVE-2025-67519

  WordPress Ninja Tables plugin <= 5.2.3 - SQL Injection vulnerability

  High 7.6

• CVE-2025-2940

  Ninja Tables – Easy Data Table Builder <= 5.0.18 - Unauthenticated Server-Side Request Forgery

  High 7.2

• CVE-2026-61964

  WordPress Ninja Tables plugin <= 5.2.9 - Cross Site Scripting (XSS) vulnerability

  High 7.1

• CVE-2025-2939

  Ninja Tables – Easy Data Table Builder <= 5.0.18 - Unauthenticated PHP Object Injection to Limited Remote Code Execution

  Medium 5.6

• CVE-2024-7304

  Ninja Tables – Easiest Data Table Builder <= 5.0.12 - Authenticated (Author+) Stored Cross-Site Scripting via SVG File Upload

  Medium 5.4

• CVE-2026-65474

  WordPress Ninja Tables plugin <= 5.2.10 - Sensitive Data Exposure vulnerability

  Medium 5.3

• CVE-2024-23504

  WordPress Ninja Tables plugin <= 5.0.5 - Broken Access Control vulnerability

  Medium 5.3

• CVE-2024-35635

  WordPress Ninja Tables plugin <= 5.0.9 - Server Side Request Forgery (SSRF) vulnerability

  Medium 4.9

• CVE-2022-47137

  WordPress Ninja Tables Plugin <= 4.3.4 is vulnerable to Cross Site Scripting (XSS)

  Medium 4.8

• CVE-2026-2306

  Ninja Tables <= 5.2.6 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Table Creation

  Medium 4.3

• CVE-2026-25008

  WordPress Ninja Tables plugin <= 5.2.5 - Sensitive Data Exposure vulnerability

  Medium 4.3

• CVE-2024-23503

  WordPress Ninja Tables plugin <= 5.0.6 - Broken Access Control vulnerability

  Medium 4.3