Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

2 records

Priority LOW 35

The NinjaScanner – Virus & Malware scan plugin for WordPress is vulnerable to arbitrary file deletion due to insufficient file path validation in the 'nscan_ajax_quarantine' and 'nscan_quarantine_select' functions in all…

CVSS 3.1HIGH 7.2 Network High privileges No interaction EPSS 0.00602 Published 2025-07-31 No fix listed CWE-36
Priority LOW 35

The NinjaFirewall plugin for WordPress is vulnerable to Authenticated PHAR Deserialization in versions up to, and including, 4.3.3.

CVSS 3.1HIGH 7.2 Network High privileges No interaction EPSS 0.00636 Published 2024-10-16 Fixed in 4.3.4 CWE-502