WP ManageNinja LLC

Records83All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical5CVSS 9.0–10.0

CVSS high31CVSS 7.0–8.9

Exploited now

WP ManageNinja LLC records in CISA KEV

No WP ManageNinja LLC vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Ninja Tables 10 records MEDIUM Fluent Support 5 records MEDIUM Fluentsmtp 3 records MEDIUM Fluentcrm 2 records LOW Fluentauth 1 record HIGH Ninja Job Board 1 record MEDIUM Pdf Generator For Fluent Forms 1 record LOW

Records

3 records in Fluentsmtp · all components

TI-2023-00211 CVE-2023-0219 · GHSA-pxhc-h425-4r7w

FluentSMTP < 2.2.3 - Stored XSS via Email Logs

MEDIUM 58

The FluentSMTP WordPress plugin before 2.2.3 does not sanitize or escape email content, making it vulnerable to stored cross-site scripting attacks (XSS) when an administrator views the email logs.

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00507 Published 2023-03-13 Fixed in 2.2.3 CWE-79

TI-2023-02893 CVE-2023-3087 · GHSA-vp8h-vvmf-j596

FluentSMTP <= 2.2.4 - Unauthenticated Stored Cross-Site Scripting via Email Subject

LOW 39

The FluentSMTP plugin for WordPress is vulnerable to Stored Cross-Site Scripting via an email subject in versions up to, and including, 2.2.4 due to insufficient input sanitization and output escaping.

CVSS 3.1HIGH 7.2 Network No auth No interaction EPSS 0.00605 Published 2023-07-12 No fix listed CWE-79

TI-2021-06815 CVE-2021-24528 · GHSA-vcw9-mv32-wmgq

FluentSMTP < 2.0.1 - Authenticated Stored XSS

LOW 25

The FluentSMTP WordPress plugin before 2.0.1 does not sanitize parameters before storing the settings in the database, nor does the plugin escape the values before outputting them when viewing the SMTP settings set by th…

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00624 Published 2021-08-30 Fixed in 2.0.1 CWE-79

Open these records in search →

Critical	5
High	31
Medium	46
Low	1
No CVSS	0