All 4 CVE vulnerabilities found in Ninja Tables – Easy Data Table Builder, with AI-generated Chinese analysis, references, and POCs.
Vendor: techjewel
| CVE ID | Title | CVSS | Severity | Published |
|---|---|---|---|---|
| CVE-2026-2306 | Ninja Tables <= 5.2.6 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Table Creation CWE-862 | 4.3 | Medium | 2026-05-06 |
| CVE-2025-2940 | Ninja Tables – Easy Data Table Builder <= 5.0.18 - Unauthenticated Server-Side Request Forgery CWE-918 | 7.2 | High | 2025-06-27 |
| CVE-2025-2939 | Ninja Tables – Easy Data Table Builder <= 5.0.18 - Unauthenticated PHP Object Injection to Limited Remote Code Execution CWE-502 | 5.6 | Medium | 2025-06-03 |
| CVE-2024-7304 | Ninja Tables – Easiest Data Table Builder <= 5.0.12 - Authenticated (Author+) Stored Cross-Site Scripting via SVG File Upload CWE-79 | 6.4 | Medium | 2024-08-27 |
All 4 known CVE vulnerabilities affecting Ninja Tables – Easy Data Table Builder with full Chinese analysis, references, and POCs where available.