HIGH
WordPress Ninja Tables Plugin <= 4.3.4 is vulnerable to Cross Site Request Forgery (CSRF)
Published May 25, 2023
8.8
HIGHCVSS 3.1
EPSS 0.27%
Description
Cross-Site Request Forgery (CSRF) vulnerability in WPManageNinja LLC Ninja Tables – Best Data Table Plugin for WordPress plugin <= 4.3.4 versions.
Affected products
- Vendor WPManageNinja LLC Product Ninja Tables – Best Data Table Plugin for WordPress Defaultunaffected
- Version -StatusaffectedConstraints<=4.3.4
- Version
Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).
| Vendor | Product | Default status | Versions | ||||||
|---|---|---|---|---|---|---|---|---|---|
| WPManageNinja LLC | Ninja Tables – Best Data Table Plugin for WordPress | unaffected |
|
- ≤ 4.3.4
No data.
No Red Hat product state for this CVE.
No package ranges for this CVE.
Remediation
Vendor solution
Update to 4.3.5 or a higher version.
Weaknesses (1)
References (2)
- https://euvd.enisa.europa.eu/vulnerability/EUVD-2022-49911 Advisory
- https://patchstack.com/database/vulnerability/ninja-tables/wordpress-ninja-tables-best-data-table-plugin-for-wordpress-plugin-4-3-4-cross-site-request-forgery-csrf?_s_id=cve vdb-entryThird Party Advisory
| Link | Providers | Tags |
|---|---|---|
| https://euvd.enisa.europa.eu/vulnerability/EUVD-2022-49911 | Advisory | |
| https://patchstack.com/database/vulnerability/ninja-tables/wordpress-ninja-tables-best-data-table-plugin-for-wordpress-plugin-4-3-4-cross-site-request-forgery-csrf?_s_id=cve | vdb-entryThird Party Advisory |
Change history (0)
No recorded changes yet.
Sources
CVE.org / MITRE
Status PUBLISHED
Assigner Patchstack
Published May 25, 2023
Updated Apr 28, 2026
Reserved Dec 12, 2022
Link CVE-2022-47136
CISA Vulnrichment
Updated Jan 8, 2025
ENISA EUVD
EUVD-2022-49911 Assigner Patchstack
Published May 25, 2023
Updated Apr 28, 2026
Exploited since n/a
Link EUVD-2022-49911