293 matches found
PT-2025-49355
The Fluent Forms โ Customizable Contact Forms, Survey, Quiz, & Conversational Form Builder plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions up to, and including, 6.1.7 via the 'submission id' parameter due to missing validation on a user controlled key within...
EUVD-2021-21270
Malware in sbrugna...
EUVD-2024-27716
Malicious code in bioql PyPI...
EUVD-2024-44306
Malicious code in bioql PyPI...
EUVD-2024-27726
Malicious code in bioql PyPI...
EUVD-2025-7183
Malicious code in bioql PyPI...
EUVD-2024-46318
Malicious code in bioql PyPI...
EUVD-2024-47747
Malicious code in bioql PyPI...
EUVD-2025-5668
Malicious code in bioql PyPI...
EUVD-2023-59153
Malicious code in bioql PyPI...
EUVD-2024-32716
Malicious code in bioql PyPI...
EUVD-2024-49987
Malicious code in bioql PyPI...
EUVD-2023-28466
Malicious code in bioql PyPI...
EUVD-2024-47599
Malicious code in bioql PyPI...
EUVD-2025-11513
Malicious code in bioql PyPI...
600,000 WordPress Sites Affected by PHP Object Injection Vulnerability in Fluent Forms WordPress Plugin
๐ข Calling all Vulnerability Researchers and Bug Bounty Hunters!๐ข ๐ Participate in theSQLsplorer Challenge! Now through September 22, 2025, all SQL Injection vulnerabilities in software with at least 25 active installs are considered in-scope for all researchers, regardless of researcher tier AND...
WordPress plugin Fluent Forms ไปฃ็ ้ฎ้ขๆผๆด
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A code issue vulnerability...
CVE-2025-9260
CVE-2025-9260 relates to Fluent Forms for WordPress, where versions 5.1.16โ6.1.1 are vulnerable to PHP Object Injection via parseUserProperties, enabling an authenticated Subscriber+ to deserialize untrusted input. A POP chain allows reading arbitrary files, potentially exposing sensitive data (e...
CVE-2025-9260 Fluent Forms โ Customizable Contact Forms, Survey, Quiz, & Conversational Form Builder 5.1.16 - 6.1.1 - Authenticated (Subscriber+) PHP Object Injection To Arbitrary File Read
The Fluent Forms โ Customizable Contact Forms, Survey, Quiz, & Conversational Form Builder plugin for WordPress is vulnerable to PHP Object Injection in versions 5.1.16 to 6.1.1 via deserialization of untrusted input in the parseUserProperties function. This makes it possible for authenticated...
