CVE-2026-119213

The Fluent Support WordPress plugin (versions ≤ 2.4.7 ) is vulnerable to unauthenticated modification of a registered customer's profile fields. The root cause lies in the Fluent Forms integration (FeedIntegration::notify()), which resolves a logged-out submitter's email to a WordPress account vi...