WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
fluent-boards-pro
Published
2026-08-26
Title
Fluent Boards Pro < 2.0.12 - Authenticated (Editor+) Arbitrary File Upload
Slug
fluent-boards-pro
Published
2026-08-26
Title
Fluent Boards Pro < 2.0.12 - Authenticated (Subscriber+) Stored Cross-Site Scripting
Slug
fluent-boards-pro
Published
2026-08-26
Title
Fluent Boards Pro < 2.0.12 - Authenticated (Editor+) PHP Object Injection
Slug
fluent-boards-pro
Published
2026-08-26
Title
Fluent Boards Pro < 2.0.12 - Authenticated (Editor+) Arbitrary File Deletion
Slug
fluent-booking
Published
2025-12-03
Title
Fluent Booking – The Ultimate Appointments Scheduling, Events Booking, Events Calendar Solution < 1.10.0 - Authenticated (Subscriber+) Missing Authorization to Calendar Import and Management
Slug
fluent-booking
Published
2025-11-25
Title
Fluent Booking < 1.10.0 - Missing Authorization
Slug
fluent-booking
Published
2026-03-25
Title
Fluent Booking < 2.0.05 - Unauthenticated Stored Cross-Site Scripting via Multiple Parameters
Slug
fluent-booking
Published
2026-06-09
Title
Fluent Booking < 2.1.2 - Calendar Manager+ Sensitive Information Disclosure via Attendee Export
Slug
fluent-booking
Published
2026-06-26
Title
Fluent Booking – The Ultimate Appointments Scheduling, Events Booking, Events Calendar Solution < 2.1.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
fluent-booking-pro
Published
2026-08-26
Title
FluentBooking Pro < 2.2.5 - Cross-Site Request Forgery
Slug
fluent-booking-pro
Published
2026-09-03
Title
Fluent Booking Pro < 2.3.0 - Missing Authorization
Slug
fluent-booking-pro
Published
2026-10-05
Title
Fluent Booking Pro < 2.5.0 - Missing Authorization
Slug
fluent-cart
Published
2025-12-02
Title
FluentCart A New Era of eCommerce < 1.3.2 - Authenticated (Administrator+) SQL Injection via 'groupKey' Parameter
Slug
fluent-cart
Published
2026-01-27
Title
FluentCart < 1.3.0 - Unauthenticated Stored Cross-Site Scripting
Slug
fluent-cart
Published
2026-07-07
Title
FluentCart < 1.4.0 - Subscriber+ Subscription Payment-Method Tampering via IDOR
Slug
fluent-cart
Published
2026-07-13
Title
FluentCart < 1.5.3 - Unauthenticated Order PII Disclosure via Print Routes
Slug
fluent-cart
Published
2026-09-28
Title
FluentCart < 1.6.5 - Unauthenticated Guest Customer Account Takeover via Checkout Email
Slug
fluent-cart
Published
2026-10-13
Title
FluentCart A New Era of eCommerce – Faster, Lighter, and Simpler < 1.8.0 - Unauthenticated Information Exposure
Slug
fluent-cart
Published
2026-08-24
Title
FluentCart < 1.6.3 - Custom Role+ Arbitrary File Deletion via 'file_path' Parameter
Slug
fluent-cart
Published
2026-10-15
Title
FluentCart A New Era of eCommerce < 1.7.1 - Authenticated (Administrator+) SQL Injection via 'products.variants' Array Keys
Slug
fluent-cart
Published
2026-10-15
Title
FluentCart A New Era of eCommerce < 1.7.1 - Insecure Direct Object Reference to Unauthenticated Sensitive Information Disclosure via 'order_id' and 'billing_address_id' Parameters
Slug
fluent-cart
Published
2026-10-20
Title
FluentCart < 2.2.0 - Unauthenticated Customer Address Disclosure via IDOR
Slug
fluent-community
Published
2025-04-17
Title
FluentCommunity < 1.3.1 - Unauthenticated PHP Object Injection
Slug
fluent-community
Published
2025-11-28
Title
FluentCommunity < 2.1.0 - Missing Authorization
Slug
fluent-community
Published
2026-08-10
Title
FluentCommunity – Ultra-Fast High-Performance Social Network, Community, LMS & Online Courses < 2.7.7 - Authenticated (Subscriber+) Stored Cross-Site Scripting