CVE-2026-66633

CVE-2026-66633 is an unauthenticated Cross-Site Scripting (XSS) vulnerability in the Fluent Forms Pro Add On Pack WordPress plugin, affecting versions prior to 6.2.12 . The flaw was discovered by daroo and assigned a CVSS 3.1 score of 7.1 (HIGH) with a vector of AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:...

CVE-2026-66633

Unauthenticated Cross Site Scripting XSS in Fluent Forms Pro Add On Pack 6.2.12 versions...

CVE-2026-66633 WordPress Fluent Forms Pro Add On Pack plugin < 6.2.12 - Cross Site Scripting (XSS) vulnerability

Unauthenticated Cross Site Scripting XSS in Fluent Forms Pro Add On Pack 6.2.12 versions...

EUVD-2026-60918

Unauthenticated Cross Site Scripting XSS in Fluent Forms Pro Add On Pack 6.2.12 versions...

CVE-2026-66633 WordPress Fluent Forms Pro Add On Pack plugin < 6.2.12 - Cross Site Scripting (XSS) vulnerability

Unauthenticated Cross Site Scripting XSS in Fluent Forms Pro Add On Pack 6.2.12 versions...

WordPress Fluent Forms plugin <= 6.2.11 - Unauthenticated Stored Cross-Site Scripting via Notification Smartcode Values vulnerability

Unauthenticated Stored Cross-Site Scripting via Notification Smartcode Values vulnerability discovered by Adrien Brunner in WordPress Plugin FluentForm versions = 6.2.11...

GO-2025-3750 vulnerabilities

Vulnerabilities for packages: nvidia-nsight-compute-13.1, kubeflow-katib, go, nvidia-nsight-compute-13.0, nvidia-nsight-compute-12.8, newrelic-fluent-bit-output, nvidia-nsight-compute-12.9...

GO-2024-2962 vulnerabilities

Vulnerabilities for packages: newrelic-fluent-bit-output, argo-workflows, kubeflow-katib...

GO-2026-5264 vulnerabilities

Vulnerabilities for packages: agentbeat, cloud-sql-proxy, cloud-sql-proxy-fips, jaeger, beats, prometheus-pushgateway-fips, minio, ops-agent, node-problem-detector-fips, fluent-bit-plugin-loki, nrdot-collector-k8s, grafana-fips, datadog-agent, minio-fips, istio, minio-operator-fips, trillian,...

GO-2026-4603 vulnerabilities

Vulnerabilities for packages: dex, net-kourier-fips, kubo, kubernetes-dashboard-web, etcd-fips, image-factory-fips, cluster-api-fips, kubernetes-csi-driver-nfs, aws-flb-firehose-fips, flux, pulumi, terraform-provider-azuread-fips, kubernetes-csi-external-resizer, kubescape-server, coredns,...

GO-2025-3828 vulnerabilities

Vulnerabilities for packages: kubeflow-katib, newrelic-fluent-bit-output...

GO-2025-3750 vulnerabilities

Vulnerabilities for packages: kubeflow-katib, go, newrelic-fluent-bit-output...

GO-2025-3540 vulnerabilities

Vulnerabilities for packages: oauth2-proxy, authservice, kots, splunk-otel-collector, gitea, falcosidekick, atlantis, fluent-bit-plugin-loki...

GO-2024-2962 vulnerabilities

Vulnerabilities for packages: argo-workflows, kubeflow-katib, newrelic-fluent-bit-output...

GO-2026-5264 vulnerabilities

Vulnerabilities for packages: tempo, istio, prometheus-operator, opentelemetry-collector, k8sgpt, mc, cloud-sql-proxy, datadog-agent, node-problem-detector, karma, loki, minio-operator, prometheus, prometheus-pushgateway, grafana, splunk-otel-collector, trillian, jaeger, keda, minio,...

GO-2024-2918 vulnerabilities

Vulnerabilities for packages: harbor-registry, policy-controller, cosign, flux-source-controller, py3-azure-identity, tempo, flux-kustomize-controller, flux-image-reflector-controller, opentelemetry-collector-contrib, rclone, thanos, secrets-store-csi-driver-provider-azure, sigstore-scaffolding,...

CVE-2026-73532

Fluent Forms Pro 6.2.7 contains an embedded malicious code vulnerability introduced via a tampered plugin build served through a decommissioned update server. The tampered build introduced a rogue PHP file libs/class-license-sync.php, loaded via a requireonce directive added to fluentformpro.php,...

CVE-2026-73532

Fluent Forms Pro 6.2.7 contains an embedded malicious code vulnerability introduced via a tampered plugin build served through a decommissioned update server. The tampered build introduced a rogue PHP file libs/class-license-sync.php, loaded via a requireonce directive added to fluentformpro.php,...

CVE-2026-73532

Fluent Forms Pro 6.2.7 is affected by an embedded malicious-code vulnerability introduced via a tampered plugin build served from a decommissioned update server. A rogue PHP file, libs/class-license-sync.php, was loaded through a require_once in fluentformpro.php, creating a backdoor REST API end...

EUVD-2026-58113

Fluent Forms Pro 6.2.7 contains an embedded malicious code vulnerability introduced via a tampered plugin build served through a decommissioned update server. The tampered build introduced a rogue PHP file libs/class-license-sync.php, loaded via a requireonce directive added to fluentformpro.php,...