Mahmudul Hasan Arif Vulnerabilities and Affected Products
Vulnerabilities associated with WP Social Ninja.
Products
Clear product- FluentBoards3 vulnerabilities
- WP Social Ninja2 vulnerabilities
- Enhanced Blocks – Page Builder Blocks for Gutenberg1 vulnerability
- Ninja Charts1 vulnerability
| Vulnerability | Title and context | CVSS | EPSS | PoCs | Signals | STIX action |
|---|---|---|---|---|---|---|
CVE-2026-65521MEDIUM | WordPress WP Social Ninja plugin <= 4.3.0 - Sensitive Data Exposure vulnerabilityUnauthenticated Sensitive Data Exposure in WP Social Ninja <= 4.3.0 versions. CWE-497Jul 23, 2026 | CVSS5.3v3.1 | EPSS0.24% | PoCs0 | SignalsNot listed in CISA KEVNo known ransomware useNo Nuclei templates | STIX |
CVE-2025-64375MEDIUM | WordPress WP Social Ninja plugin <= 3.20.1 - Broken Access Control vulnerabilityMissing Authorization vulnerability in Mahmudul Hasan Arif WP Social Ninja wp-social-reviews allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WP Social Ninja: from n/a through <= 3.20.1. CWE-862Dec 18, 2025 | CVSS6.5v3.1 | EPSS0.202% | PoCs0 | SignalsNot listed in CISA KEVNo known ransomware useNo Nuclei templates | STIX |