Fluent Forms – Customizable Contact Forms, Survey, Quiz, & Conversational Form Builder

Güvenlik açıkları

• CVE-2024-2771kimlik doğrulamasız≤ 5.1.16

  Contact Form Plugin by Fluent Forms for Quiz, Survey, and Drag & Drop WP Form Builder <= 5.1.16 - Missing Authorization to Settings Update and Limited Privilege

  Kritik 9.8

• CVE-2023-24410yüksek yetki≤ 4.3.25

  WordPress FluentForm Plugin <= 4.3.25 is vulnerable to SQL Injection

  Kritik 9.8

• CVE-2026-73532kimlik doğrulamasız

  Fluent Forms Pro 6.2.7 Embedded Malicious Code via Tampered Plugin Build

  Kritik 9.3

• CVE-2021-34620kimlik doğrulamasız · tıklama gerekir→ 3.6.67

  CSRF in WP Fluent Forms < 3.6.67 allows stored XSS and Privilege Escalation

  Yüksek 8.8

• CVE-2024-4157katılımcı+≤ 5.1.15

  Contact Form Plugin by Fluent Forms for Quiz, Survey, and Drag & Drop WP Form Builder <= 5.1.15 - PHP Object Injection via extractDynamicValues

  Yüksek 8.8

• CVE-2026-5395abone+≤ 6.2.0

  Fluent Forms <= 6.2.0 - Authenticated (Subscriber+) Authorization Bypass via 'table' Parameter

  Yüksek 8.2

• CVE-2026-5396abone+≤ 6.1.21

  Fluent Forms <= 6.1.21 - Authenticated (Subscriber+) Authorization Bypass via 'form_id' Parameter

  Yüksek 8.2

• CVE-2024-2782kimlik doğrulamasız≤ 5.1.16

  Contact Form Plugin by Fluent Forms for Quiz, Survey, and Drag & Drop WP Form Builder <= 5.1.16 - Missing Authorization to Setting Manipulation

  Yüksek 7.5

• CVE-2026-18146kimlik doğrulamasız≤ 6.2.11

  Fluent Forms <= 6.2.11 - Unauthenticated Stored Cross-Site Scripting via Notification Smartcode Values

  Yüksek 7.2

• CVE-2026-16655kimlik doğrulamasız≤ 6.2.7

  Fluent Forms <= 6.2.7 - Unauthenticated Stored Cross-Site Scripting via Name Field Nested `password` Member

  Yüksek 7.2

• CVE-2026-2365kimlik doğrulamasız≤ 6.1.17

  Fluent Forms Pro <= 6.1.17 - Unauthenticated Stored Cross-Site Scripting via Draft Form Submission

  Yüksek 7.2

• CVE-2026-103343giriş gerekir≤ 6.2.14

  WordPress FluentForm plugin <= 6.2.14 - Cross Site Scripting (XSS) vulnerability

  Orta 6.5

• CVE-2025-9260abone+≤ 6.1.1

  Fluent Forms – Customizable Contact Forms, Survey, Quiz, & Conversational Form Builder 5.1.16 - 6.1.1 - Authenticated (Subscriber+) PHP Object Injection To Arbi

  Orta 6.5

• CVE-2026-0996abone+≤ 6.1.14

  Fluent Forms <= 6.1.14 - Authenticated (Subscriber+) Stored Cross-Site Scripting via AI Form Builder Module

  Orta 6.4

• CVE-2026-6828katılımcı+≤ 6.2.1

  Fluent Forms <= 6.2.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'permission_message' Shortcode Attribute

  Orta 6.4

• CVE-2025-3615katılımcı+≤ 6.0.2

  Fluent Forms <= 6.0.2 - Authenticated (Contributor+) Stored Cross-Site Scripting

  Orta 6.4

• CVE-2024-4709katılımcı+≤ 5.1.16

  Contact Form Plugin by Fluent Forms for Quiz, Survey, and Drag & Drop WP Form Builder <= 5.1.16 - Authenticated (Contributor+) Stored Cross-Site Scripting

  Orta 6.4

• CVE-2026-17571kimlik doğrulamasız · tıklama gerekir≤ 6.2.8

  Fluent Forms <= 6.2.8 - Reflected Cross-Site Scripting via 'param'

  Orta 6.1

• CVE-2024-10646kimlik doğrulamasız≤ 5.2.6

  Contact Form Plugin by Fluent Forms for Quiz, Survey, and Drag & Drop WP Form Builder <= 5.2.6 - Unauthenticated Stored Cross-Site Scripting via Form Subject

  Orta 6.1

• CVE-2026-5069abone+≤ 6.2.1

  Fluent Forms <= 6.2.1 - Incorrect Authorization to Authenticated (Subscriber+) Arbitrary Subscription Cancellation via 'subscription_id'

  Orta 5.4

• CVE-2024-6703abone+≤ 5.1.19

  Contact Form Plugin by Fluent Forms for Quiz, Survey, and Drag & Drop WP Form Builder <= 5.1.19 - Authenticated (Subscriber+) Stored Cross-Site Scripting via We

  Orta 5.4

• CVE-2023-6957katılımcı+≤ 5.1.9

  Fluent Forms <= 5.1.9 - Authenticated (Contributor+) Stored Cross-Site Scripting

  Orta 5.4

• CVE-2026-103353kimlik doğrulamasız≤ 6.2.14

  WordPress FluentForm plugin <= 6.2.14 - Broken Access Control vulnerability

  Orta 5.3

• CVE-2026-17567kimlik doğrulamasız≤ 6.2.8

  Fluent Forms <= 6.2.8 - Unauthenticated Sensitive Information Exposure via Insecure Direct Object Reference and Weak Transaction Hash in 'transaction' Parameter

  Orta 5.3

• CVE-2026-4160kimlik doğrulamasız

  Fluent Forms – Customizable Contact Forms, Survey, Quiz, & Conversational Form Builder <= 6.1.21 - Insecure Direct Object Reference in Stripe SCA Confirmation t

  Orta 5.3

• CVE-2025-69001kimlik doğrulamasız≤ 6.1.11

  WordPress FluentForm plugin <= 6.1.11 - Arbitrary Shortcode Execution vulnerability

  Orta 5.3

• CVE-2025-13748kimlik doğrulamasız≤ 6.1.7

  Fluent Forms <= 6.1.7 - Unauthenticated Insecure Direct Object Reference to Payment Status Tampering via submission_id

  Orta 5.3

• CVE-2024-13666kimlik doğrulamasız≤ 5.2.12

  Fluent Forms – Customizable Contact Forms, Survey, Quiz, & Conversational Form Builder <= 5.2.12 - IP-Spoofing

  Orta 5.3

• CVE-2023-41952kimlik doğrulamasız≤ 5.0.8

  WordPress Fluent Forms plugin <= 5.0.8 - Broken Access Control vulnerability

  Orta 5.3

• CVE-2025-13722abone+≤ 6.1.7

  Fluent Forms <= 6.1.7 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Form Creation via AI Builder

  Orta 5.3

• CVE-2026-6344yönetici≤ 6.2.1

  Fluent Forms <= 6.2.1 - Authenticated (Administrator+) Arbitrary File Read via Path Traversal in Email Attachment

  Orta 4.9

• CVE-2024-9528giriş gerekir≤ 5.1.19

  Contact Form Plugin by Fluent Forms for Quiz, Survey, and Drag & Drop WP Form Builder <= 5.1.19 - Authenticated (Form Manager+) Stored Cross-Site Scripting

  Orta 4.8

• CVE-2024-0618yönetici≤ 5.1.5

  Fluent Forms <= 5.1.5 - Authenticated(Administrator+) Stored Cross-Site Scripting via imported form title

  Orta 4.8

• CVE-2024-6521yönetici≤ 5.1.19

  Contact Form Plugin by Fluent Forms for Quiz, Survey, and Drag & Drop WP Form Builder <= 5.1.19 - Authenticated (Administrator+) Stored Cross-Site Scripting

  Orta 4.4

• CVE-2024-6520yönetici≤ 5.1.19

  Contact Form Plugin by Fluent Forms for Quiz, Survey, and Drag & Drop WP Form Builder <= 5.1.19 - Authenticated (Administrator+) Stored Cross-Site Scripting

  Orta 4.4

• CVE-2024-6518yönetici≤ 5.1.19

  Contact Form Plugin by Fluent Forms for Quiz, Survey, and Drag & Drop WP Form Builder <= 5.1.19 - Authenticated (Administrator+) Stored Cross-Site Scripting

  Orta 4.4

• CVE-2026-25313giriş gerekir≤ 6.1.14

  WordPress FluentForm plugin <= 6.1.14 - Broken Access Control vulnerability

  Orta 4.3

• CVE-2024-5053abone+≤ 5.1.18

  Contact Form Plugin by Fluent Forms for Quiz, Survey, and Drag & Drop WP Form Builder <= 5.1.18 - Missing Authorization to Authenticated (Subscriber+) Mailchim

  Orta 4.3