Ninja Tables Pro Vulnerabilities

The Fluent Forms Pro in version 6.2.7 and the Ninja Tables Pro in version 5.2.13 plugins for WordPress are vulnerable to Remote Code Execution via Backdoor. This is due to threat actors compromised the vendor's system and embedded a backdoor into the plugin's code. This makes it possible for unauthenticated attackers t...

CVSS:

9.8

Affected:

5.2.11 – 5.2.11

Fixed in:

5.2.13

Disclosed:

Aug 3, 2026

The Ninja Tables Pro plugin for WordPress is vulnerable to Stored Cross-Site Scripting in versions up to, and including, 5.0.17 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in page...

CVSS:

6.4

Affected:

up to 5.0.17

Fixed in:

5.0.18

Disclosed:

May 16, 2025

CVE-2025-39534 on NVD →

Affected:

up to 5.0.17

Fix:

No patched version reported

CVE-2025-39534 on NVD →