WordPress Fluent Forms Pro Add On Pack plugin < 6.2.12 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by daroo in WordPress Plugin Fluent Forms Pro Add On Pack versions 6.2.12...

PT-2026-77061

Unauthenticated Cross Site Scripting XSS in Fluent Forms Pro Add On Pack 6.2.12 versions...

CVE-2026-66633: Improper Neutralization of Input During Web Page Generation

Unauthenticated Cross Site Scripting XSS in Fluent Forms Pro Add On Pack 6.2.12 versions...

WordPress Fluent Forms plugin <= 6.2.11 - Unauthenticated Stored Cross-Site Scripting via Notification Smartcode Values vulnerability

Unauthenticated Stored Cross-Site Scripting via Notification Smartcode Values vulnerability discovered by Adrien Brunner in WordPress Plugin FluentForm versions = 6.2.11...

GO-2025-3750 vulnerabilities

Vulnerabilities for packages: kubeflow-katib, go, nvidia-nsight-compute-12.8, newrelic-fluent-bit-output, nvidia-nsight-compute-13.0, nvidia-nsight-compute-13.1, nvidia-nsight-compute-12.9...

GO-2024-2962 vulnerabilities

Vulnerabilities for packages: kubeflow-katib, newrelic-fluent-bit-output, argo-workflows...

GO-2026-5264 vulnerabilities

Vulnerabilities for packages: keda-fips, jaeger, amazon-cloudwatch-agent-operator, beats, loki-fips, node-problem-detector-fips, tempo-fips, prometheus, datadog-agent-fips, minio, tempo, agentbeat, loki, minio-fips, metrics-server, trillian-fips, cloudzero-agent, certificate-transparency,...

GO-2026-4603 vulnerabilities

Vulnerabilities for packages: gomplate-fips, hubble-ui-backend-fips, kubo, vault-fips, knative-eventing-fips, sftpgo-plugin-eventsearch, sops, kepler, karma, blob-csi, goose-fips, vault-env, tigera-operator, docker-cli, crossplane-provider-kubernetes-fips, flux-source-controller-fips,...

GO-2025-3828 vulnerabilities

Vulnerabilities for packages: kubeflow-katib, newrelic-fluent-bit-output...

GO-2025-3750 vulnerabilities

Vulnerabilities for packages: kubeflow-katib, go, newrelic-fluent-bit-output...

GO-2025-3540 vulnerabilities

Vulnerabilities for packages: splunk-otel-collector, atlantis, oauth2-proxy, gitea, authservice, falcosidekick, kots, fluent-bit-plugin-loki...

GO-2024-2962 vulnerabilities

Vulnerabilities for packages: kubeflow-katib, newrelic-fluent-bit-output, argo-workflows...

GO-2026-5264 vulnerabilities

Vulnerabilities for packages: jaeger, cloud-sql-proxy, keda, k8sgpt, trillian, minio, istio, karma, grafana, prometheus, prometheus-operator, tempo, loki, minio-operator, opentelemetry-collector, aws-otel-collector, metrics-server, certificate-transparency, datadog-agent, mc, splunk-otel-collecto...

GO-2024-2918 vulnerabilities

Vulnerabilities for packages: zarf, velero, policy-controller, rekor, bank-vaults, rclone, hugo, k8sgpt, py3-cassandra-medusa, grafana-agent-operator, fulcio, flux-source-controller, flux-image-reflector-controller, airflow, prometheus-operator, harbor-registry, opentelemetry-collector-contrib,...

CVE-2026-73532

Fluent Forms Pro 6.2.7 contains an embedded malicious code vulnerability introduced via a tampered plugin build served through a decommissioned update server. The tampered build introduced a rogue PHP file libs/class-license-sync.php, loaded via a requireonce directive added to fluentformpro.php,...

EUVD-2026-58113

Fluent Forms Pro 6.2.7 contains an embedded malicious code vulnerability introduced via a tampered plugin build served through a decommissioned update server. The tampered build introduced a rogue PHP file libs/class-license-sync.php, loaded via a requireonce directive added to fluentformpro.php,...

CVE-2026-73532

Fluent Forms Pro 6.2.7 contains an embedded malicious code vulnerability introduced via a tampered plugin build served through a decommissioned update server. The tampered build introduced a rogue PHP file libs/class-license-sync.php, loaded via a requireonce directive added to fluentformpro.php,...

CVE-2026-73532 Fluent Forms Pro 6.2.7 Embedded Malicious Code via Tampered Plugin Build

Fluent Forms Pro 6.2.7 contains an embedded malicious code vulnerability introduced via a tampered plugin build served through a decommissioned update server. The tampered build introduced a rogue PHP file libs/class-license-sync.php, loaded via a requireonce directive added to fluentformpro.php,...

CVE-2026-73532

Fluent Forms Pro 6.2.7 is affected by an embedded malicious-code vulnerability introduced via a tampered plugin build served from a decommissioned update server. A rogue PHP file, libs/class-license-sync.php, was loaded through a require_once in fluentformpro.php, creating a backdoor REST API end...

CLEANSTART-2026-PU07904 Security fixes in fluent-operator 3.9.0-r2

Package fluent-operator version 3.9.0-r2 fixes 9 vulnerabilities: CVE-2026-46600, CVE-2026-25681, CVE-2026-27136, CVE-2026-39821, CVE-2026-25680...