Unauthenticated Cross Site Scripting in Ninja Tables by WP Ninjas
CVE-2026-61964

7.1HIGH

Key Information:

Vendor

WordPress
Status
Ninja Tables
Vendor
CVE Published:
6 August 2026

What is CVE-2026-61964?

An unauthenticated Cross Site Scripting vulnerability in Ninja Tables, versions up to 5.2.9, allows attackers to inject malicious scripts into web pages. This can lead to the potential execution of arbitrary scripts in the context of users' browsers, posing significant risks to user data and site integrity. It is crucial for users of affected versions to apply security updates promptly to mitigate the risks associated with this vulnerability.

Affected Version(s)

Ninja Tables <= 5.2.9

References

https://patchstack.com/database/wordpress/plugin/ninja-ta...
vdb-entry

CVSS V3.1

Score:
7.1
Severity:
HIGH
Confidentiality:
Low
Integrity:
Low
Availability:
Low
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
Required
Scope:
Changed

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

daroo | Patchstack Bug Bounty Program
.