WP ManageNinja LLC
Products
| Product | CVEs | Exploited | Latest |
|---|---|---|---|
| Fluent CRM | 4 | – | Oct 30, 2026 |
| FluentForm | 3 | – | Oct 19, 2026 |
| FluentBoards | 2 | – | Nov 7, 2026 |
| Fluent Booking | 2 | – | Nov 7, 2026 |
| FluentCRM Pro | 2 | – | Aug 24, 2026 |
| Fluent Support Pro | 2 | – | Aug 24, 2026 |
| FluentAuth | 1 | – | Sep 17, 2026 |
| Fluent Forms Pro Add On Pack | 1 | – | Oct 5, 2026 |
| Fluent Boards Pro | 1 | – | Aug 24, 2026 |
| FluentCommunity | 1 | – | Oct 19, 2026 |
Exploited and recent CVEs
- CVE-2026-122659 WordPress Fluent Booking plugin <= 2.5.0 - Broken Access Control vulnerability –
- CVE-2026-119486 WordPress FluentBoards plugin <= 2.2.2 - Broken Access Control vulnerability –
- CVE-2026-121781 WordPress Fluent Booking plugin <= 2.5.0 - Broken Access Control vulnerability –
- CVE-2026-62056 WordPress Fluent CRM plugin <= 3.2.6 - Broken Access Control vulnerability 0.3%
- CVE-2026-62141 WordPress Fluent CRM plugin <= 3.2.6 - Broken Access Control vulnerability 0.2%
- CVE-2026-111831 WordPress FluentForm plugin <= 6.2.15 - Broken Access Control vulnerability 0.2%
- CVE-2026-111836 WordPress FluentCommunity plugin <= 2.11.0 - Broken Access Control vulnerability 0.2%
- CVE-2026-109693 WordPress Fluent CRM plugin <= 3.2.5 - Privilege Escalation vulnerability 0.3%
- CVE-2026-109694 WordPress Fluent CRM plugin <= 3.2.5 - Privilege Escalation vulnerability 0.3%
- CVE-2026-109696 WordPress FluentBoards plugin <= 2.1.0 - Broken Access Control vulnerability 0.1%
- CVE-2026-94669 WordPress Fluent Forms Pro Add On Pack plugin <= 6.2.13 - Broken Access Control vulnerability 0.2%
- CVE-2026-103343 WordPress FluentForm plugin <= 6.2.14 - Cross Site Scripting (XSS) vulnerability 0.1%
- CVE-2026-103353 WordPress FluentForm plugin <= 6.2.14 - Broken Access Control vulnerability 0.2%
- CVE-2026-78296 WordPress FluentAuth plugin <= 2.1.2 - Email Verification Bypass vulnerability 0.2%
- CVE-2026-78279 WordPress Fluent Support Pro plugin <= 2.3.1 - Cross Site Request Forgery (CSRF) vulnerability 0.1%
- CVE-2026-78278 WordPress Fluent Boards Pro plugin <= 2.0.11 - Insecure Direct Object References (IDOR) vulnerability 0.3%
- CVE-2026-78277 WordPress FluentCRM Pro plugin <= 3.1.12 - Server Side Request Forgery (SSRF) vulnerability 0.2%
- CVE-2026-78272 WordPress Fluent Support Pro plugin <= 2.3.1 - Broken Access Control vulnerability 0.2%
- CVE-2026-78270 WordPress FluentCRM Pro plugin <= 3.1.12 - SQL Injection vulnerability 0.4%