CVE-2026-73532

creationtimestamp| type| source ---|---|--- 2026-08-13 17:30:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3msy6aydsu62e 2026-08-14 18:00:21+00:00| exploited| https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/080da246-3d59-4f1f-826f-e9a2d3b99076...

CVE-2026-73532

Fluent Forms Pro 6.2.7 is affected by an embedded malicious-code vulnerability introduced via a tampered plugin build served from a decommissioned update server. A rogue PHP file, libs/class-license-sync.php, was loaded through a require_once in fluentformpro.php, creating a backdoor REST API end...