WordPress plugin Fluent Support 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform has the ability to host personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin. A security vulnerabili...

PT-2026-1902

Name of the Vulnerable Software and Affected Versions Shahjahan Jewel Fluent Support versions through 1.10.4 Description An authorization issue exists in Fluent Support that allows exploitation of incorrectly configured access control security levels. Recommendations Versions prior to and includi...

WordPress Fluent Support plugin <= 1.10.4 - Broken Access Control vulnerability

Broken Access Control vulnerability discovered by daroo in WordPress Plugin Fluent Support versions = 1.10.4...

EUVD-2024-42340

Malicious code in bioql PyPI...

EUVD-2024-42763

Malicious code in bioql PyPI...

EUVD-2023-56259

Malicious code in bioql PyPI...

EUVD-2025-28645

Malicious code in bioql PyPI...

EUVD-2022-34813

Malicious code in bioql PyPI...

CVE-2025-57885

Cross-Site Request Forgery CSRF vulnerability in Shahjahan Jewel Fluent Support fluent-support allows Cross Site Request Forgery.This issue affects Fluent Support: from n/a through = 1.9.1...

WordPress Fluent Support Plugin <= 1.9.1 - Cross Site Request Forgery (CSRF) Vulnerability

Cross Site Request Forgery CSRF Vulnerability discovered by Bao BlueRock in WordPress Plugin Fluent Support versions = 1.9.1...

CVE-2025-57885

Cross-Site Request Forgery CSRF vulnerability in Shahjahan Jewel Fluent Support fluent-support allows Cross Site Request Forgery.This issue affects Fluent Support: from n/a through = 1.9.1...

CVE-2025-57885 WordPress Fluent Support Plugin <= 1.9.1 - Cross Site Request Forgery (CSRF) Vulnerability

Cross-Site Request Forgery CSRF vulnerability in Shahjahan Jewel Fluent Support fluent-support allows Cross Site Request Forgery.This issue affects Fluent Support: from n/a through = 1.9.1...

CVE-2025-57885

CVE-2025-57885 is a CSRF flaw in Shahjahan Jewel Fluent Support (WordPress Fluent Support plugin) affecting versions up to 1.9.1. The issue enables CSRF on authenticated actions and has a CVSS v3.1 base score of 4.3 (Medium) with network attack vector, requiring user interaction. Public reference...

CVE-2025-57885 WordPress Fluent Support Plugin <= 1.9.1 - Cross Site Request Forgery (CSRF) Vulnerability

Cross-Site Request Forgery CSRF vulnerability in Shahjahan Jewel Fluent Support allows Cross Site Request Forgery. This issue affects Fluent Support: from n/a through 1.9.1...

PT-2025-34350 · Unknown · Shahjahan Jewel Fluent Support

Name of the Vulnerable Software and Affected Versions: Shahjahan Jewel Fluent Support versions n/a through 1.9.1 Description: The software contains a Cross-Site Request Forgery CSRF flaw. This issue allows attackers to perform actions on behalf of authenticated users without their knowledge...

CVE-2025-57885: Cross-Site Request Forgery (CSRF)

Cross-Site Request Forgery CSRF vulnerability in Shahjahan Jewel Fluent Support fluent-support allows Cross Site Request Forgery.This issue affects Fluent Support: from n/a through = 1.9.1...

WordPress plugin Fluent Support 跨站请求伪造漏洞

WordPress and the WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed in the PHP language. The platform supports personal blog sites on servers running PHP and MySQL.WordPress plugin is an application plugin. A cross-site request forgery...

CVE-2024-47302

Missing Authorization vulnerability in Shahjahan Jewel Fluent Support fluent-support allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Fluent Support: from n/a through = 1.8.0...

CVE-2023-51547

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in WPManageNinja LLC Fluent Support – WordPress Helpdesk and Customer Support Ticket Plugin.This issue affects Fluent Support – WordPress Helpdesk and Customer Support Ticket Plugin: from n/a through...

CVE-2022-2559

The Fluent Support WordPress plugin before 1.5.8 does not properly sanitise, validate and escape various parameters before using them in an SQL statement, leading to an SQL Injection vulnerability exploitable by high privilege users...