WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
fluent-support
Published
2023-12-27
Title
Fluent Support < 1.7.7 - Authenticated(Administrator+) SQL Injection
Slug
fluent-support
Published
2024-09-25
Title
Fluent Support < 1.8.1 - Insufficient Authorization on Email Verification
Slug
fluent-support
Published
2024-09-25
Title
Fluent Support < 1.8.1 - Authenticated (Subscriber+) SQL Injection
Slug
fluent-support
Published
2025-02-28
Title
Fluent Support – Helpdesk & Customer Support Ticket System < 1.8.6 - Unauthenticated Sensitive Information Exposure Through Unprotected Directory
Slug
fluent-support
Published
2025-08-22
Title
Fluent Support < 1.9.2 - Cross-Site Request Forgery
Slug
fluent-support
Published
2026-01-05
Title
Fluent Support < 1.10.5 - Missing Authorization
Slug
fluent-support
Published
2026-07-17
Title
Fluent Support < 2.3.1 - Agent+ Arbitrary Ticket Customer Reassignment via IDOR
Slug
fluent-support
Published
2026-07-22
Title
Fluent Support – Helpdesk & Customer Support Ticket System < 2.3.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
fluent-support
Published
2026-07-23
Title
Fluent Support < 2.3.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'redirect-to' Shortcode Attribute
Slug
fluent-support-pro
Published
2026-08-24
Title
Fluent Support Pro < 2.3.2 - Missing Authorization
Slug
fluent-support-pro
Published
2026-08-24
Title
Fluent Support Pro < 2.3.2 - Cross-Site Request Forgery
Slug
fluentcampaign-pro
Published
2026-08-25
Title
FluentCRM Pro < 3.1.13 - Authenticated (Editor+) Privilege Escalation
Slug
fluentcampaign-pro
Published
2026-08-24
Title
FluentCRM PRO < 3.1.13 - Authenticated (Subscriber+) Server-Side Request Forgery
Slug
fluentcrm-pro
Published
2026-08-24
Title
FluentCRM Pro < 3.1.13 - Authenticated (Author+) SQL Injection
Slug
fluentform
Published
2021-06-17
Title
WP Fluent Forms < 3.6.67 - Cross-Site Request Forgery (CSRF)
Slug
fluentform
Published
2022-10-17
Title
FluentForm < 4.3.13 - CSV Injection
Slug
fluentform
Published
2023-03-20
Title
FluentForms < 4.3.25 - Contributor+ Stored XSS via Custom HTML Form Field
Slug
fluentform
Published
2023-07-12
Title
FluentForm < 5.0.0 - SQL Injection
Slug
fluentform
Published
2023-09-08
Title
Contact Form for Plugin by Fluent Forms < 5.0.9 - Insecure Direct Object Reference
Slug
fluentform
Published
2024-01-18
Title
Fluent Forms < 5.1.7 - Admin+ Stored Cross-Site Scripting via imported form title
Slug
fluentform
Published
2024-03-05
Title
Fluent Forms < 5.1.10 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
fluentform
Published
2024-05-17
Title
Contact Form Plugin by Fluent Forms < 5.1.17 - Unauthenticated Limited Privilege Escalation
Slug
fluentform
Published
2024-05-17
Title
Contact Form Plugin by Fluent Forms < 5.1.17 - Unauthenticated Settings Update
Slug
fluentform
Published
2024-05-17
Title
Contact Form Plugin by Fluent Forms < 5.1.14 - Subscriber+ Stored XSS
Slug
fluentform
Published
2024-05-17
Title
Contact Form Plugin by Fluent Forms < 5.1.17 - Contributor+ Stored XSS