Extension WordPress
Vulnérabilités Ninja Tables – Easy Data Table Builder
Cette page rassemble les failles publiées pour Ninja Tables – Easy Data Table Builder, leurs plages de versions affectées et les correctifs signalés dans la base locale.
Historique de sécurité
CVE et vulnérabilités de Ninja Tables – Easy Data Table Builder
13 fiches
Ninja Tables <= 5.2.6 – Missing Authorization to Authenticated (Subscriber+) Arbitrary Table Creation
The Ninja Tables – Easy Data Table Builder plugin for WordPress is vulnerable to unauthorized database table creation due to missing authorization checks on the `createFluentCartTable` function in all versions up to, and including, 5.2.6. This makes it…
*-5.2.6
5.2.7
05/05/2026
Ninja Tables – Easy Data Table Builder <= 5.2.5 – Authenticated (Contributor+) Information Exposure
The Ninja Tables – Easy Data Table Builder plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 5.2.5. This makes it possible for authenticated attackers, with Contributor-level access and above, to…
*-5.2.5
5.2.6
18/01/2026
Ninja Tables <= 5.2.4 – Authenticated (Contributor+) SQL Injection
The Ninja Tables plugin for WordPress is vulnerable to SQL Injection in versions up to, and including, 5.2.4 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. This…
*-5.2.4
5.2.5
07/01/2026
Ninja Tables <= 5.2.3 – Authenticated (Administrator+) SQL Injection
The Ninja Tables plugin for WordPress is vulnerable to SQL Injection in versions up to, and including, 5.2.3 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. This…
*-5.2.3
5.2.4
15/12/2025
Ninja Tables – Easy Data Table Builder <= 5.0.18 – Unauthenticated Server-Side Request Forgery
The Ninja Tables – Easy Data Table Builder plugin for WordPress is vulnerable to Server-Side Request Forgery in all versions up to, and including, 5.0.18 via the args[url] parameter. This makes it possible for unauthenticated attackers to make…
*-5.0.18
5.0.19
26/06/2025
Ninja Tables – Easy Data Table Builder <= 5.0.18 – Unauthenticated PHP Object Injection to Limited Remote Code Execution
The Ninja Tables – Easy Data Table Builder plugin for WordPress is vulnerable to PHP Object Injection in all versions up to, and including, 5.0.18 via deserialization of untrusted input from the args[callback] parameter . This makes it…
*-5.0.18
5.0.19
02/06/2025
Ninja Tables – Easy Data Table <= 5.0.16 – Authenticated (Admin+) Stored Cross-Site Scripting
The Ninja Tables – Easy Data Table Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via a CSV import in all versions up to, and including, 5.0.16 due to insufficient input sanitization and output escaping. This…
*-5.0.16
5.0.17
09/01/2025
Ninja Tables – Easiest Data Table Builder <= 5.0.12 – Authenticated (Author+) Stored Cross-Site Scripting via SVG File Upload
The Ninja Tables – Easiest Data Table Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via SVG File uploads in all versions up to, and including, 5.0.12 due to insufficient input sanitization and output escaping. This…
*-5.0.12
5.0.13
26/08/2024
Ninja Tables – Easiest Data Table Builder <= 5.0.9 – Authenticated (Admin+) Server-Side Request Forgery
The Ninja Tables – Easiest Data Table Builder plugin for WordPress is vulnerable to Server-Side Request Forgery in all versions up to, and including, 5.0.9. This makes it possible for authenticated attackers, with Administrator-level access and above, to…
*-5.0.9
5.0.10
30/05/2024
Ninja Tables <= 5.0.5 – Missing Authorization
The Ninja Tables plugin for WordPress is vulnerable to unauthorized access due to a missing capability check on the defaultExport() and dragAndDropExport() functions in versions up to, and including, 5.0.5. This makes it possible for unauthenticated attackers to…
*-5.0.5
5.0.6
19/01/2024
Ninja Tables <= 4.3.4 – Cross-Site Request Forgery
The Ninja Tables plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 4.3.4. This is due to missing or incorrect nonce validation on the remindMeLater function. This makes it possible for unauthenticated…
*-4.3.4
4.3.5
20/04/2023
Ninja Tables <= 4.3.4 – Authenticated (Administrator+) Stored Cross-Site Scripting via plugin settings
The Ninja Tables plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin settings in versions up to, and including, 4.3.4 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers,…
*-4.3.4
4.3.5
19/04/2023
Ninja Tables <= 4.1.7 – Admin+ Stored Cross-Site Cross-Site Scripting
The Ninja Tables WordPress plugin before 4.1.8 does not sanitise and escape some of its table fields, which could allow high privilege users to perform Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed
*-4.1.7
4.1.8
25/10/2021
Extensions également surveillés
WP Commander
Rechercher dans toute la base WordPress
Utilisez la recherche globale pour retrouver une extension, un thème, une CVE ou un identifiant de vulnérabilité.