WordPress Plugin Vulnerabilities | Page 26 | WPScan

0-9
a
b
c
d
e
f
g
h
i
j
k
l
m
n
o
p
q
r
s
t
u
v
w
x
y
z

Slug

Published

2023-03-20

Title

FluentForms < 4.3.25 - Contributor+ Stored XSS via Custom HTML Form Field

Slug

Published

2023-07-12

Title

FluentForm < 5.0.0 - SQL Injection

Slug

Published

2023-09-08

Title

Contact Form for Plugin by Fluent Forms < 5.0.9 - Insecure Direct Object Reference

Slug

Published

2024-01-18

Title

Fluent Forms < 5.1.7 - Admin+ Stored Cross-Site Scripting via imported form title

Slug

Published

2024-03-05

Title

Fluent Forms < 5.1.10 - Authenticated (Contributor+) Stored Cross-Site Scripting

Slug

Published

2024-05-17

Title

Contact Form Plugin by Fluent Forms < 5.1.17 - Unauthenticated Limited Privilege Escalation

Slug

Published

2024-05-17

Title

Contact Form Plugin by Fluent Forms < 5.1.17 - Unauthenticated Settings Update

Slug

Published

2024-05-17

Title

Contact Form Plugin by Fluent Forms < 5.1.14 - Subscriber+ Stored XSS

Slug

Published

2024-05-17

Title

Contact Form Plugin by Fluent Forms < 5.1.17 - Contributor+ Stored XSS

Slug

Published

2024-05-21

Title

Contact Form Plugin by Fluent Forms < 5.1.16 - Contributor+ PHP Object Injection

Slug

Published

2024-07-26

Title

Contact Form Plugin by Fluent Forms for Quiz, Survey, and Drag & Drop WP Form Builder < 5.1.20 - Authenticated (Administrator+) Stored Cross-Site Scripting

Slug

Published

2024-07-26

Title

Contact Form Plugin by Fluent Forms for Quiz, Survey, and Drag & Drop WP Form Builder < 5.1.20 - Authenticated (Administrator+) Stored Cross-Site Scripting

Slug

Published

2024-07-26

Title

Contact Form Plugin by Fluent Forms for Quiz, Survey, and Drag & Drop WP Form Builder < 5.1.20 - Authenticated (Administrator+) Stored Cross-Site Scripting

Slug

Published

2024-07-26

Title

Contact Form Plugin by Fluent Forms for Quiz, Survey, and Drag & Drop WP Form Builder < 5.1.20 - Authenticated (Subscriber+) Stored Cross-Site Scripting via Welcome Screen Fields

Slug

Published

2024-08-31

Title

Contact Form Plugin by Fluent Forms for Quiz, Survey, and Drag & Drop WP Form Builder < 5.1.19 - Missing Authorization to Authenticated (Subscriber+) Mailchimp Integration Modification

Slug

Published

2024-10-04

Title

Contact Form Plugin by Fluent Forms < 5.1.20 - Form Manager+ Stored XSS

Slug

Published

2024-11-18

Title

Contact Form Plugin by Fluent Forms < 5.2.1 - Admin+ Stored XSS

Slug

Published

2024-12-13

Title

Contact Form Plugin by Fluent Forms < 5.2.7 - Unauthenticated Stored XSS via Form Subject

Slug

Published

2025-03-21

Title

Fluent Forms – Customizable Contact Forms, Survey, Quiz, & Conversational Form Builder < 6.0.0 - IP-Spoofing

Slug

Published

2025-04-16

Title

Fluent Forms < 6.0.3 - Contributor+ Stored XSS

Slug

Published

2025-09-02

Title

Fluent Forms 5.1.16 - 6.1.0 - Subscriber+ PHP Object Injection To Arbitrary File Read

Slug

Published

2025-12-05

Title

Fluent Forms < 6.1.8 - Unauthenticated Payment Status Tampering via IDOR

Slug

Published

2026-01-06

Title

Fluent Forms < 6.1.8 - Subscriber+ Arbitrary Form Creation via AI Builder

Slug

fluentforms-pdf

Published

2024-01-22

Title

PDF Generator For Fluent Forms < 1.1.8 - Cross-Site Scripting

Slug

fluid-accessible-pager

Published

2014-08-01

Title

SWFUpload - Cross-Site Scripting (XSS)