fluentformpro

WordPress · Plugin

11 reports

Vulnerability alerts

Report	Product	Ecosystem	Severity	Fix status	Last updated
Fluent Forms Pro Add On Pack <= 6.2.13 - Unauthenticated Stored Cross-Site ScriptingCVE-2026-94675	fluentformpro	WordPress	High	Fix reported	2026-10-09
Fluent Forms Pro Add On Pack <= 6.2.13 - Missing AuthorizationCVE-2026-94669	fluentformpro	WordPress	Medium	Fix reported	2026-10-09
Fluent Forms Pro 6.2.7 & Ninja Tables Pro 5.2.13 - Remote Code Execution via BackdoorCVE-2026-73532	fluentformpro ninja-tables-pro	WordPress	Critical	Fix reported	2026-09-17
Fluent Forms Pro Add On Pack <= 6.2.12 - Authenticated (Subscriber+) Privilege EscalationCVE-2026-81297	fluentformpro	WordPress	Medium	Fix reported	2026-09-02
Fluent Forms Pro Add On Pack <= 6.2.12 - Missing AuthorizationCVE-2026-81296	fluentformpro	WordPress	Medium	Fix reported	2026-09-02
Fluent Forms Pro Add On Pack < 6.2.12 - Unauthenticated Stored Cross-Site ScriptingCVE-2026-66633	fluentformpro	WordPress	High	Fix reported	2026-08-25
Fluent Forms Pro Add On Pack <= 6.2.6 - Authenticated (Subscriber+) PHP Object Injection to Arbitrary User Password Change via User Meta FieldCVE-2026-15962	fluentformpro	WordPress	High	Fix reported	2026-07-26
Fluent Forms Pro Add On Pack <= 6.1.17 - Missing Authorization to Unauthenticated Payment Status modificationCVE-2026-2428	fluentformpro	WordPress	High	Fix reported	2026-03-12
Fluent Forms Pro Add On Pack <= 6.1.17 - Missing Authorization to Unauthenticated Arbitrary Attachment DeletionCVE-2026-2899	fluentformpro	WordPress	Medium	Fix reported	2026-03-05
Fluent Forms Pro <= 6.1.17 - Unauthenticated Stored Cross-Site Scripting via Draft Form SubmissionCVE-2026-2365	fluentformpro	WordPress	High	Fix reported	2026-03-05
Fluent Forms Pro Add On Pack <= 6.1.12 - Authenticated (Subscriber+) Server-Side Request Forgery via 'saveDataSource'CVE-2026-0632	fluentformpro	WordPress	Medium	Fix reported	2026-02-09