1410 matches found
CVE-2026-104728 AutomatorWP <= 5.8.4 - Missing Authorization to Authenticated (Subscriber+) Sensitive Information Disclosure via wp_ajax_automatorwp_fluentform_get_forms AJAX Action
The AutomatorWP – No-Code Workflow Automation, Integration & Webhooks Plugin, now with AI plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 5.8.4. This is due to the plugin not properly verifying that a user is authorized to perform an action. This...
CVE-2026-15178
The Fluent Forms plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 6.2.5. This is due to the plugin not properly verifying that a user is authorized to perform an action. This makes it possible for authenticated attackers, with Custom-level access an...
EUVD-2026-96226
The Fluent Forms plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 6.2.5. This is due to the plugin not properly verifying that a user is authorized to perform an action. This makes it possible for authenticated attackers, with Custom-level access an...
CVE-2026-15178 Fluent Forms <= 6.2.5 - Missing Authorization to Authenticated (Custom+) Sensitive Data Exposure and Modification
The Fluent Forms plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 6.2.5. This is due to the plugin not properly verifying that a user is authorized to perform an action. This makes it possible for authenticated attackers, with Custom-level access an...
CVE-2026-15178
The Fluent Forms plugin for WordPress is vulnerable to an authorization bypass in all versions up to and including 6.2.5 . The root cause is the plugin's failure to properly verify if a user is authorized to perform specific actions. This flaw allows authenticated attackers with Custom-level acce...
CVE-2026-101324
The Fluent Forms – Customizable Contact Forms, Survey, Quiz, & Conversational Form Builder plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'any attacker-chosen name matching the get.NAME placeholder PoC uses 'proof'' parameter in all versions up to, and including,...
EUVD-2026-96056
The Fluent Forms – Customizable Contact Forms, Survey, Quiz, & Conversational Form Builder plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'any attacker-chosen name matching the get.NAME placeholder PoC uses 'proof'' parameter in all versions up to, and including,...
CVE-2026-101324
The Fluent Forms plugin for WordPress (versions
CVE-2026-101324 Fluent Forms <= 6.2.14 - Reflected Cross-Site Scripting via '{get.*}' Editor SmartCode Parameter
The Fluent Forms – Customizable Contact Forms, Survey, Quiz, & Conversational Form Builder plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'any attacker-chosen name matching the get.NAME placeholder PoC uses 'proof'' parameter in all versions up to, and including,...
WordPress Fluent Forms – Customizable Contact Forms, Survey, Quiz, & Conversational Form Builder plugin <= 6.2.5 - Missing Authorization to Authenticated (Custom+) Sensitive Data Exposure and Modification vulnerability
Missing Authorization to Authenticated Custom+ Sensitive Data Exposure and Modification vulnerability discovered by Nadir Şensoy in WordPress Plugin FluentForm versions = 6.2.5...
WordPress Fluent Forms – Customizable Contact Forms, Survey, Quiz, & Conversational Form Builder plugin <= 6.2.14 - Reflected Cross-Site Scripting vulnerability
Reflected Cross-Site Scripting vulnerability discovered by Santh in WordPress Plugin FluentForm versions = 6.2.14...
CVE-2026-61674
A flaw was found in Fluent Bit. A stack-based buffer overflow exists in the forward output plugin due to insufficient bounds checking on server responses during connection handshakes. A remote attacker controlling or impersonating a destination server can exploit this vulnerability by sending an...
CVE-2026-94675
Unauthenticated Cross Site Scripting XSS in Fluent Forms Pro Add On Pack = 6.2.13 versions...
CVE-2026-94675 WordPress Fluent Forms Pro Add On Pack plugin <= 6.2.13 - Cross Site Scripting (XSS) vulnerability
Unauthenticated Cross Site Scripting XSS in Fluent Forms Pro Add On Pack = 6.2.13 versions...
CVE-2026-94675 WordPress Fluent Forms Pro Add On Pack plugin <= 6.2.13 - Cross Site Scripting (XSS) vulnerability
Unauthenticated Cross Site Scripting XSS in Fluent Forms Pro Add On Pack = 6.2.13 versions...
EUVD-2026-93065
Unauthenticated Cross Site Scripting XSS in Fluent Forms Pro Add On Pack = 6.2.13 versions...
CVE-2026-94675
The Fluent Forms Pro Add On Pack plugin for WordPress is vulnerable to an unauthenticated Cross-Site Scripting (XSS) vulnerability in versions
CVE-2026-39789
Unauthenticated Broken Access Control in Fluent Affiliate Pro = 1.6.4 versions...
CVE-2026-39789
The Fluent Affiliate Pro WordPress plugin, version 1.6.4 and below , is vulnerable to an unauthenticated Broken Access Control vulnerability. This flaw is classified as CWE-862: Missing Authorization , allowing an attacker to perform actions without proper authentication. The vulnerability has a ...