Advisories · Technology
techjewel Ninja Tables – Easy Data Table Builder.
Every CVE that names techjewel Ninja Tables – Easy Data Table Builder among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
- CVSS 4.3 Medium
Ninja Tables <= 5.2.6 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Table Creation
- techjewel Ninja Tables – Easy Data Table Builder
- Broken access control
- CVSS 7.2 High
Ninja Tables – Easy Data Table Builder <= 5.0.18 - Unauthenticated Server-Side Request Forgery
- techjewel Ninja Tables – Easy Data Table Builder
- Server-side request forgery (SSRF)
- CVSS 5.6 Medium
Ninja Tables – Easy Data Table Builder <= 5.0.18 - Unauthenticated PHP Object Injection to Limited Remote Code Execution
- techjewel Ninja Tables – Easy Data Table Builder
- Insecure deserialization
- CVSS 6.4 Medium
Ninja Tables – Easiest Data Table Builder <= 5.0.12 - Authenticated (Author+) Stored Cross-Site Scripting via SVG File Upload
- techjewel Ninja Tables – Easy Data Table Builder
- Cross-site scripting (XSS)