WordPress plugin Fluent Forms 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform has the ability to host personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin. A security vulnerabili...

EUVD-2021-21270

Malware in sbrugna...

EUVD-2024-47747

Malicious code in bioql PyPI...

EUVD-2025-7183

Malicious code in bioql PyPI...

EUVD-2024-44306

Malicious code in bioql PyPI...

EUVD-2024-46318

Malicious code in bioql PyPI...

EUVD-2024-27726

Malicious code in bioql PyPI...

EUVD-2025-5668

Malicious code in bioql PyPI...

EUVD-2024-27716

Malicious code in bioql PyPI...

EUVD-2023-59153

Malicious code in bioql PyPI...

EUVD-2024-49987

Malicious code in bioql PyPI...

EUVD-2024-32716

Malicious code in bioql PyPI...

EUVD-2023-28466

Malicious code in bioql PyPI...

EUVD-2024-47599

Malicious code in bioql PyPI...

EUVD-2025-11513

Malicious code in bioql PyPI...

600,000 WordPress Sites Affected by PHP Object Injection Vulnerability in Fluent Forms WordPress Plugin

📢 Calling all Vulnerability Researchers and Bug Bounty Hunters!📢 💉 Participate in theSQLsplorer Challenge! Now through September 22, 2025, all SQL Injection vulnerabilities in software with at least 25 active installs are considered in-scope for all researchers, regardless of researcher tier AND...

CVE-2025-9260: Deserialization of Untrusted Data

The Fluent Forms – Customizable Contact Forms, Survey, Quiz, & Conversational Form Builder plugin for WordPress is vulnerable to PHP Object Injection in versions 5.1.16 to 6.1.1 via deserialization of untrusted input in the parseUserProperties function. This makes it possible for authenticated...

WordPress plugin Fluent Forms 代码问题漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A code issue vulnerability...

CVE-2025-9260

CVE-2025-9260 relates to Fluent Forms for WordPress, where versions 5.1.16–6.1.1 are vulnerable to PHP Object Injection via parseUserProperties, enabling an authenticated Subscriber+ to deserialize untrusted input. A POP chain allows reading arbitrary files, potentially exposing sensitive data (e...

CVE-2025-9260 Fluent Forms – Customizable Contact Forms, Survey, Quiz, & Conversational Form Builder 5.1.16 - 6.1.1 - Authenticated (Subscriber+) PHP Object Injection To Arbitrary File Read

The Fluent Forms – Customizable Contact Forms, Survey, Quiz, & Conversational Form Builder plugin for WordPress is vulnerable to PHP Object Injection in versions 5.1.16 to 6.1.1 via deserialization of untrusted input in the parseUserProperties function. This makes it possible for authenticated...