962 matches found
Contact Form Plugin by Fluent Forms < 5.1.17 - Unauthenticated Limited Privilege Escalation
The plugin is vulnerable to privilege escalation due to a missing capability check on the /wp-json/fluentform/v1/managers REST API endpoint. This makes it possible for unauthenticated attackers to grant users with Fluent Form management permissions which gives them access to all of the plugin's...
CVE-2024-23722-poc
CVE-2024-23722-poc Usage root@kitploit: python3 exploit.py http://127.0.0.1:8888 port is currently not open port is currently not open port is currently not open port is currently not open Server might have crashed port is currently not open port is currently not open port is currently not open...
CVE-2026-81296
Unauthenticated Broken Access Control in Fluent Forms Pro Add On Pack = 6.2.12 versions...
CVE-2026-81297
Fluent Forms Pro Add On Pack is a WordPress plugin affected by a Subscriber Privilege Escalation vulnerability in versions ≤ 6.2.12 , as discovered by Ananda Dhakal (Patchstack). The CVSS 3.1 score is 7.5 (HIGH) with the vector AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H, indicating a network-based attac...
EUVD-2026-68781
Unauthenticated Broken Access Control in Fluent Forms Pro Add On Pack = 6.2.12 versions...
CVE-2026-81296 WordPress Fluent Forms Pro Add On Pack plugin <= 6.2.12 - Broken Access Control vulnerability
Unauthenticated Broken Access Control in Fluent Forms Pro Add On Pack = 6.2.12 versions...
EUVD-2026-68782
Subscriber Privilege Escalation in Fluent Forms Pro Add On Pack = 6.2.12 versions...
CVE-2026-81296
CVE-2026-81296 affects the WordPress plugin Fluent Forms Pro Add On Pack (versions
CVE-2024-4323
🇮🇱 BringThemHome NeverAgainIsNow 🇮🇱 We demand the safe return of all citizens who have been taken hostage by the terrorist group Hamas. We will not rest until every hostage is released and returns home safely. You can help bring them back home.https://stories.bringthemhomenow.net/ CVE-2024-4323...
PT-2026-84006
Unauthenticated Broken Access Control in Fluent Forms Pro Add On Pack = 6.2.12 versions...
CVE-2024-2782-PoC
CVE-2024-2782-PoC CVE-2024-2782 Proof-of-Concept The Contact Form Plugin by Fluent Forms for Quiz, Survey, and Drag & Drop WP Form Builder plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the /wp-json/fluentform/v1/global-settings REST A...
CVE-2024-2771-PoC
CVE-2024-2771-PoC CVE-2024-2771 Proof-of-Concept The Contact Form Plugin by Fluent Forms for Quiz, Survey, and Drag & Drop WP Form Builder plugin for WordPress is vulnerable to privilege escalation due to a missing capability check on the /wp-json/fluentform/v1/managers REST API endpoint in all...
WordPress Fluent Forms Pro Add On Pack plugin <= 6.2.12 - Broken Access Control vulnerability
Broken Access Control vulnerability discovered by Ananda Dhakal Patchstack in WordPress Plugin Fluent Forms Pro Add On Pack versions = 6.2.12...
WordPress Fluent Forms Pro Add On Pack plugin <= 6.2.12 - Privilege Escalation vulnerability
Privilege Escalation vulnerability discovered by Ananda Dhakal Patchstack in WordPress Plugin Fluent Forms Pro Add On Pack versions = 6.2.12...
CVE-2024-4323-Exploit-POC
CVE-2024-4323-Exploit-POC Questo script proof-of-concept dimostra come sfruttare CVE-2024-4323, una vulnerabilità di corruzione della memoria in Fluent Bit, che consente l'esecuzione remota di codice. CVE-2024-4323 è una vulnerabilità di corruzione della memoria nelle versioni di Fluent Bit dalla...
CVE-2026-78276
Editor PHP Object Injection in Fluent Boards Pro = 2.0.11 versions...
CVE-2026-78274
Editor Arbitrary File Upload in Fluent Boards Pro = 2.0.11 versions...
CVE-2026-78275
Editor Arbitrary File Deletion in Fluent Boards Pro = 2.0.11 versions...