Read the docs

WP ManageNinja LLC

Records83All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical5CVSS 9.0–10.0
CVSS high31CVSS 7.0–8.9

Exploited now

WP ManageNinja LLC records in CISA KEV

No WP ManageNinja LLC vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Ninja Tables 10 records MEDIUM Fluent Support 5 records MEDIUM Fluentsmtp 3 records MEDIUM Fluentcrm 2 records LOW Fluentauth 1 record HIGH Ninja Job Board 1 record MEDIUM Pdf Generator For Fluent Forms 1 record LOW

Records

1 record in Fluentauth · all components

TI-2022-04342 CVE-2022-4746 · GHSA-733x-g8m7-q4jm

FluentAuth < 1.0.2 - Bypass blocks by IP Spoofing

Priority HIGH 72

The FluentAuth WordPress plugin before 1.0.2 prioritizes getting a visitor's IP address from certain HTTP headers over PHP's REMOTE_ADDR, which makes it possible to bypass the IP-based blocks set by the plugin.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00735 Published 2023-01-23 Fixed in 1.0.2 CWE-290
Open these records in search →