İçeriğe atla
Noroxi

ninjateam kayıtları

ninjateam üreticisine ait 37 yayımlanmış kayıt.

Araştırmacı profili

KEV’e giren
0 · %0
Silahlaştırılmış
0 · %0
Pre-auth RCE
1
Düzeltme kaydı olan
%43,2
Yayından KEV’e ortanca
KEV’e giren kayıt yok

Yıllara göre kayıt

  1. 21
  2. 22
  3. 23
  4. 24
  5. 25

Çubuk: toplam · koyu kısım: CISA KEV.

Tekrar eden sınıflar

Bu üreticide en sık görülen zafiyet sınıfları: nereye bakmalı.

CWE

Saldırı profili

Tüm kayıtlar

37 kayıt
  • CVE-2021-24385
    40Planlayın

    Filebird 4.7.3 - Unauthenticated SQL Injection

    KritikCVSS 9,8İstismar yokEPSS %2

    ninjateam · filebird12 Tem 2021

  • CVE-2020-36718
    40Planlayın

    GDPR CCPA Compliance Support <= 2.3 - PHP Object Injection

    KritikCVSS 9,8İstismar yokEPSS %1

    ninjateam · gpdr ccpa compliance support6 Haz 2023

  • CVE-2020-24142
    40Planlayın

    Server-side request forgery in the Video Downloader for TikTok (aka downloader-tiktok) plugin 1.3 for WordPress lets an attacker send crafte

    KritikCVSS 9,8İstismar yokEPSS %1

    ninjateam · video downloader for tiktok7 Tem 2021

  • CVE-2024-47331
    39İzleyin

    WordPress Multi Step for Contact Form plugin <= 2.7.7 - Unauthenticated SQL Injection vulnerability

    KritikCVSS 9,8İstismar yokEPSS %0

    ninjateam · multi step for contact form 711 Eki 2024

  • CVE-2023-4827
    37İzleyin

    File Manager Pro < 1.8 - Remote Code Execution via CSRF

    YüksekCVSS 8,8İstismar yokEPSS %7

    ninjateam · filester16 Eki 2023

  • CVE-2024-8066
    35İzleyin

    File Manager Pro – Filester <= 1.8.6- Authenticated (Subscriber+) Arbitrary File Upload

    YüksekCVSS 8,8İstismar yokEPSS %1

    ninjateam · filester28 Kas 2024

  • CVE-2024-7031
    35İzleyin

    File Manager Pro – Filester <= 1.8.2 - Authenticated Plugin Settings Update

    YüksekCVSS 8,8İstismar yokEPSS %0

    ninjateam · filester3 Ağu 2024

  • CVE-2025-24591
    35İzleyin

    WordPress GDPR CCPA Compliance & Cookie Consent Banner plugin <= 2.7.1 - Broken Access Control vulnerability

    YüksekCVSS 8,8İstismar yokEPSS %0

    ninjateam · gdpr ccpa compliance \& cookie consent banner24 Oca 2025

  • CVE-2020-24143
    31İzleyin

    Directory traversal in the Video Downloader for TikTok (aka downloader-tiktok) plugin 1.3 for WordPress lets an attacker get access to files

    YüksekCVSS 7,5İstismar yokEPSS %1

    ninjateam · video downloader for tiktok7 Tem 2021

  • CVE-2024-35166
    30İzleyin

    WordPress FileBird – WordPress Media Library Folders & File Manager plugin <= 5.6.3 - Sensitive Data Exposure vulnerability

    YüksekCVSS 7,5İstismar yokEPSS %0

    ninjateam · filebird14 May 2024

  • CVE-2023-51406
    30İzleyin

    WordPress FastDup Plugin <= 2.1.7 is vulnerable to Sensitive Data Exposure

    YüksekCVSS 7,5İstismar yokEPSS %0

    ninjateam · fastdup8 Oca 2024

  • CVE-2023-4861
    29İzleyin

    File Manager Pro < 1.8.1 - Admin+ Remote Code Execution

    YüksekCVSS 7,2Kavram kanıtıEPSS %1

    ninjateam · filester16 Eki 2023

  • CVE-2024-9669
    28İzleyin

    File Manager Pro – Filester <= 1.8.5 - Authenticated (Administrator+) Local JavaScript File Inclusion

    YüksekCVSS 7,2İstismar yokEPSS %0

    ninjateam · filester28 Kas 2024

  • CVE-2025-26977
    28İzleyin

    WordPress FileBird plugin <= 6.4.2.1 - Insecure Direct Object References (IDOR) vulnerability

    YüksekCVSS 7,2İstismar yokEPSS %0

    ninjateam · filebird25 Şub 2025

  • CVE-2024-53825
    28İzleyin

    WordPress FileBird Lite plugin <= 6.3.2 - Broken Access Control vulnerability

    YüksekCVSS 7,2İstismar yokEPSS %0

    ninjateam · filebird6 Ara 2024

  • CVE-2023-25966
    26İzleyin

    WordPress FileBird plugin <= 5.1.4 - Broken Access Control vulnerability

    OrtaCVSS 6,5İstismar yokEPSS %0

    ninjateam · filebird9 Ara 2024

  • CVE-2023-6592
    21İzleyin

    FastDup – Fastest WordPress Migration & Duplicator < 2.2 - Directory Listing to Account Takeover and Sensitive Data Exposure

    OrtaCVSS 5,3Kavram kanıtıEPSS %0

    ninjateam · fastdup16 Oca 2024

  • CVE-2023-5740
    21İzleyin

    Live Chat with Facebook Messenger <= 1.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode

    OrtaCVSS 5,4İstismar yokEPSS %0

    ninjateam · live chat with facebook messenger25 Eki 2023

  • CVE-2024-49281
    21İzleyin

    WordPress Click to Chat – WP Support All-in-One Floating Widget plugin <= 2.3.3 - Cross Site Scripting (XSS) vulnerability

    OrtaCVSS 5,4İstismar yokEPSS %0

    ninjateam · click to chat17 Eki 2024

  • CVE-2024-2837
    21İzleyin

    WP Chat App < 3.6.4 - Admin+ Stored XSS

    OrtaCVSS 5,4İstismar yokEPSS %0

    ninjateam · wp chat app26 Nis 2024

  • CVE-2024-37504
    21İzleyin

    WordPress FileBird Document Library plugin <= 2.0.6 - Sensitive Data Exposure vulnerability

    OrtaCVSS 5,3İstismar yokEPSS %0

    ninja team · filebird document library10 Tem 2024

  • CVE-2024-1761
    21İzleyin

    WP Chat App <= 3.6.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via Block Attributes

    OrtaCVSS 5,4İstismar yokEPSS %0

    ninjateam · wp chat app7 Mar 2024

  • CVE-2024-2513
    21İzleyin

    WP Chat App <= 3.6.2 - Authenticated(Contributor+) Stored Cross-Site Scripting via Block Image Attribute

    OrtaCVSS 5,4İstismar yokEPSS %0

    ninjateam · wp chat app9 Nis 2024

  • CVE-2024-2345
    21İzleyin

    FileBird – WordPress Media Library Folders & File Manager <= 5.6.3 - Authenticated (Author+) Stored Cross-Site Scripting

    OrtaCVSS 5,4İstismar yokEPSS %0

    ninjateam · filebird2 May 2024

  • CVE-2024-10055
    21İzleyin

    Click to Chat – WP Support All-in-One Floating Widget <= 2.3.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via wpsaio_snapchat Shortcode

    OrtaCVSS 5,4İstismar yokEPSS %0

    ninjateam · click to chat18 Eki 2024