Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

5 records

Vendor: Common Ninja Clear all filters
TI-2026-04125 CVE-2026-4730 · GHSA-q9gg-cpq5-g6mh

Cross-site scripting in Common Ninja Charts Ninja: Create Beautiful Graphs & Charts and…

Priority LOW 28

The Charts Ninja: Create Beautiful Graphs & Charts and Easily Add Them to Your Website plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'chartid' shortcode attribute in all versions up to, and in…

CVSS 3.1MEDIUM 6.4 Network Low privileges No interaction EPSS 0.00188 Published 2026-05-05 No fix listed CWE-79
TI-2025-17676 CVE-2025-23909 · GHSA-pjrx-qcwx-wx4q

WordPress Compare Ninja plugin <= 2.1.0 - Cross Site Scripting (XSS) vulnerability

Priority LOW 29

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Common Ninja Compare Ninja compare-ninja-comparison-tables allows Stored XSS.This issue affects Compare Ninja: from n/…

CVSS 3.1MEDIUM 6.5 Network Low privileges User interaction EPSS 0.00383 Published 2025-01-16 No fix listed CWE-79
TI-2024-10547 CVE-2024-11382 · GHSA-vqg7-v3g3-9qcv

Cross-site scripting in Common Ninja: Fully Customizable & Perfectly Responsive Free…

Priority LOW 28

The Common Ninja: Fully Customizable & Perfectly Responsive Free Widgets for WordPress Websites plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'commonninja' shortcode in all versions u…

CVSS 3.1MEDIUM 6.4 Network Low privileges No interaction EPSS 0.00318 Published 2025-01-07 No fix listed CWE-79
TI-2024-33947 CVE-2024-50518 · GHSA-j68m-vr9h-7553

WordPress Pricer Ninja plugin <= 2.1.0 - Cross Site Scripting (XSS) vulnerability

Priority LOW 29

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Common Ninja Pricer Ninja pricer-ninja-pricing-tables allows Stored XSS.This issue affects Pricer Ninja: from n/a thro…

CVSS 3.1MEDIUM 6.5 Network Low privileges User interaction EPSS 0.00399 Published 2024-11-19 No fix listed CWE-79
TI-2022-01220 CVE-2022-1338 · GHSA-m89p-p9x7-pg34

Easily Generate Rest API Url <= 1.0.0 - Admin+ Stored Cross-Site Scripting

Priority LOW 23

The Easily Generate Rest API Url WordPress plugin through 1.0.0 does not escape some of its settings, allowing high privilege users such as admin to perform Cross-Site Scripting attacks even when the unfiltered_html capa…

CVSS 3.1MEDIUM 4.8 Network High privileges User interaction EPSS 0.00598 Published 2022-05-09 No fix listed CWE-79