CVE-2025-13748 Fluent Forms <= 6.1.7 - Unauthenticated Insecure Direct Object Reference to Payment Status Tampering via submission_id

The Fluent Forms – Customizable Contact Forms, Survey, Quiz, & Conversational Form Builder plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions up to, and including, 6.1.7 via the 'submissionid' parameter due to missing validation on a user controlled key within...

WordPress plugin Fluent Forms 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform has the ability to host personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin. A security vulnerabili...

PT-2025-49355

The Fluent Forms – Customizable Contact Forms, Survey, Quiz, & Conversational Form Builder plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions up to, and including, 6.1.7 via the 'submission id' parameter due to missing validation on a user controlled key within...

EUVD-2021-21270

Malware in sbrugna...

EUVD-2024-49987

Malicious code in bioql PyPI...

EUVD-2025-5668

Malicious code in bioql PyPI...

EUVD-2024-46318

Malicious code in bioql PyPI...

EUVD-2023-59153

Malicious code in bioql PyPI...

EUVD-2024-47747

Malicious code in bioql PyPI...

EUVD-2024-47599

Malicious code in bioql PyPI...

EUVD-2023-28466

Malicious code in bioql PyPI...

EUVD-2024-44306

Malicious code in bioql PyPI...

EUVD-2024-27716

Malicious code in bioql PyPI...

EUVD-2025-7183

Malicious code in bioql PyPI...

EUVD-2024-32716

Malicious code in bioql PyPI...

EUVD-2024-27726

Malicious code in bioql PyPI...

EUVD-2025-11513

Malicious code in bioql PyPI...

600,000 WordPress Sites Affected by PHP Object Injection Vulnerability in Fluent Forms WordPress Plugin

📢 Calling all Vulnerability Researchers and Bug Bounty Hunters!📢 💉 Participate in theSQLsplorer Challenge! Now through September 22, 2025, all SQL Injection vulnerabilities in software with at least 25 active installs are considered in-scope for all researchers, regardless of researcher tier AND...

WordPress plugin Fluent Forms 代码问题漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A code issue vulnerability...

CVE-2025-9260

CVE-2025-9260 relates to Fluent Forms for WordPress, where versions 5.1.16–6.1.1 are vulnerable to PHP Object Injection via parseUserProperties, enabling an authenticated Subscriber+ to deserialize untrusted input. A POP chain allows reading arbitrary files, potentially exposing sensitive data (e...