WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
fluent-boards
Published
2025-04-17
Title
FluentBoards < 1.48 - Unauthenticated PHP Object Injection
Slug
fluent-booking
Published
2025-12-03
Title
Fluent Booking – The Ultimate Appointments Scheduling, Events Booking, Events Calendar Solution < 1.10.0 - Authenticated (Subscriber+) Missing Authorization to Calendar Import and Management
Slug
fluent-booking
Published
2025-11-25
Title
Fluent Booking < 1.10.0 - Missing Authorization
Slug
fluent-cart
Published
2025-12-02
Title
FluentCart A New Era of eCommerce < 1.3.2 - Authenticated (Administrator+) SQL Injection via 'groupKey' Parameter
Slug
fluent-community
Published
2025-04-17
Title
FluentCommunity < 1.3.1 - Unauthenticated PHP Object Injection
Slug
fluent-community
Published
2025-11-28
Title
FluentCommunity < 2.1.0 - Missing Authorization
Slug
fluent-crm
Published
2023-03-11
Title
FluentCRM - Marketing Automation For WordPress < 2.8.0 - Unauthenticated Subscriptions Update
Slug
fluent-crm
Published
2024-03-28
Title
Fluent CRM < 2.8.45 - Authenticated (Administrator+) Stored Cross-Site Scripting
Slug
fluent-crm
Published
2025-11-20
Title
FluentCRM - Marketing Automation For WordPress < 2.9.85 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'fluentcrm_content' Shortcode
Slug
fluent-security
Published
2022-12-27
Title
FluentAuth < 1.0.2 - Bypass blocks by IP Spoofing
Slug
fluent-security
Published
2025-12-15
Title
FluentAuth - Auth Security Plugin < 2.1.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'fluent_auth_reset_password' Shortcode
Slug
fluent-smtp
Published
2021-07-29
Title
FluentSMTP < 2.0.1 - Authenticated Stored XSS
Slug
fluent-smtp
Published
2023-02-20
Title
FluentSMTP < 2.2.3 - Stored XSS via Email Logs
Slug
fluent-smtp
Published
2023-07-06
Title
FluentSMTP < 2.2.5 - Unauthenticated Stored Cross-Site Scripting
Slug
fluent-smtp
Published
2024-11-22
Title
FluentSMTP < 2.2.83 - Unauthenticated PHP Object Injection
Slug
fluent-smtp
Published
2025-01-24
Title
FluentSMTP < 2.2.81 - Cross-Site Request Forgery
Slug
fluent-support
Published
2022-08-02
Title
Fluent Support < 1.5.8 - Admin+ SQLi
Slug
fluent-support
Published
2023-12-27
Title
Fluent Support < 1.7.7 - Authenticated(Administrator+) SQL Injection
Slug
fluent-support
Published
2024-09-25
Title
Fluent Support < 1.8.1 - Insufficient Authorization on Email Verification
Slug
fluent-support
Published
2024-09-25
Title
Fluent Support < 1.8.1 - Authenticated (Subscriber+) SQL Injection
Slug
fluent-support
Published
2025-02-28
Title
Fluent Support – Helpdesk & Customer Support Ticket System < 1.8.6 - Unauthenticated Sensitive Information Exposure Through Unprotected Directory
Slug
fluent-support
Published
2025-08-22
Title
Fluent Support < 1.9.2 - Cross-Site Request Forgery
Slug
fluent-support
Published
2026-01-05
Title
Fluent Support < 1.10.5 - Missing Authorization
Slug
fluentform
Published
2021-06-17
Title
WP Fluent Forms < 3.6.67 - Cross-Site Request Forgery (CSRF)
Slug
fluentform
Published
2022-10-17
Title
FluentForm < 4.3.13 - CSV Injection