Log in Start free

techjewel

Products

ProductCVEsExploitedLatest
Fluent Forms – Customizable Contact Forms, Survey, Quiz, & Conversational Form Builder25–May 14, 2026
Fluent Forms Pro Add On Pack5–Jul 26, 2026
Ninja Tables – Easy Data Table Builder4–May 6, 2026
FluentCRM – Email Newsletter, Automation, Email Marketing, Email Campaigns, Optins, Leads, and CRM Solution3–May 22, 2026
FluentSMTP – WP SMTP Plugin with Amazon SES, SendGrid, MailGun, Postmark, Google and Any SMTP Provider2–Nov 23, 2024
Fluent Booking – The Ultimate Appointments Scheduling, Events Booking, Events Calendar Solution2–Mar 26, 2026
WP GDPR Cookie Consent1–Jun 9, 2026
Fluent Support – Helpdesk & Customer Support Ticket System1–Mar 1, 2025
FluentAuth – The Ultimate Authorization & Security Plugin for WordPress1–Dec 15, 2025

Exploited and recent CVEs

  • CVE-2026-15962 High 8.8 Fluent Forms Pro Add On Pack <= 6.2.6 - Authenticated (Subscriber+) PHP Object Injection to Arbitrary User Password Change via User Meta Field 0.5%
  • CVE-2026-8977 Medium 6.4 WP GDPR Cookie Consent <= 1.0.0 - Authenticated (Subscriber+) Stored Cross-Site Scripting via 'ninja_gdpr_ajax_actions' AJAX Action 0.2%
  • CVE-2026-7798 Medium 5.4 FluentCRM <= 2.9.87 - Unauthenticated Blind Server-Side Request Forgery via 'SubscribeURL' Parameter 0.7%
  • CVE-2026-5395 High 8.2 Fluent Forms <= 6.2.0 - Authenticated (Subscriber+) Authorization Bypass via 'table' Parameter 0.2%
  • CVE-2026-5396 High 8.2 Fluent Forms <= 6.1.21 - Authenticated (Subscriber+) Authorization Bypass via 'form_id' Parameter 0.2%
  • CVE-2026-6828 Medium 6.4 Fluent Forms <= 6.2.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'permission_message' Shortcode Attribute 0.2%
  • CVE-2026-6344 Medium 4.9 Fluent Forms <= 6.2.1 - Authenticated (Administrator+) Arbitrary File Read via Path Traversal in Email Attachment 0.6%
  • CVE-2026-2306 Medium 4.3 Ninja Tables <= 5.2.6 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Table Creation 0.2%
  • CVE-2026-4160 Medium 5.3 Fluent Forms – Customizable Contact Forms, Survey, Quiz, & Conversational Form Builder <= 6.1.21 - Insecure Direct Object Reference in Stripe SCA Confirmation to Unauthenticated Payment Status Modification 0.3%
  • CVE-2026-2231 High 7.2 Fluent Booking <= 2.0.01 - Unauthenticated Stored Cross-Site Scripting via Multiple Parameters 0.3%
  • CVE-2026-2899 Medium 6.5 Fluent Forms Pro Add On Pack <= 6.1.17 - Missing Authorization to Unauthenticated Arbitrary Attachment Deletion 0.3%
  • CVE-2026-2365 High 7.2 Fluent Forms Pro <= 6.1.17 - Unauthenticated Stored Cross-Site Scripting via Draft Form Submission 0.3%
  • CVE-2026-2428 High 7.5 Fluent Forms Pro Add On Pack <= 6.1.17 - Missing Authorization to Unauthenticated Payment Status modification 0.2%
  • CVE-2026-0996 Medium 6.4 Fluent Forms <= 6.1.14 - Authenticated (Subscriber+) Stored Cross-Site Scripting via AI Form Builder Module 0.3%
  • CVE-2026-0632 Medium 5.4 Fluent Forms Pro Add On Pack <= 6.1.12 - Authenticated (Subscriber+) Server-Side Request Forgery via 'saveDataSource' 0.2%
  • CVE-2025-13722 Medium 5.3 Fluent Forms <= 6.1.7 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Form Creation via AI Builder 0.2%
  • CVE-2025-13728 Medium 6.4 FluentAuth - Auth Security Plugin <= 2.0.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'fluent_auth_reset_password' Shortcode 0.2%
  • CVE-2025-13748 Medium 5.3 Fluent Forms <= 6.1.7 - Unauthenticated Insecure Direct Object Reference to Payment Status Tampering via submission_id 0.3%
  • CVE-2025-13756 Medium 4.3 Fluent Booking – The Ultimate Appointments Scheduling, Events Booking, Events Calendar Solution <= 1.9.11 - Authenticated (Subscriber+) Missing Authorization to Calendar Import and Management 0.2%
  • CVE-2025-12935 Medium 6.4 FluentCRM - Marketing Automation For WordPress <= 2.9.84 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'fluentcrm_content' Shortcode 0.3%
  • CVE-2025-9260 Medium 6.5 Fluent Forms – Customizable Contact Forms, Survey, Quiz, & Conversational Form Builder 5.1.16 - 6.1.1 - Authenticated (Subscriber+) PHP Object Injection To Arbitrary File Read 0.6%
  • CVE-2025-2940 High 7.2 Ninja Tables – Easy Data Table Builder <= 5.0.18 - Unauthenticated Server-Side Request Forgery 0.3%
  • CVE-2025-2939 Medium 5.6 Ninja Tables – Easy Data Table Builder <= 5.0.18 - Unauthenticated PHP Object Injection to Limited Remote Code Execution 0.5%
  • CVE-2025-3615 Medium 6.4 Fluent Forms <= 6.0.2 - Authenticated (Contributor+) Stored Cross-Site Scripting 0.3%
  • CVE-2024-13666 Medium 5.3 Fluent Forms – Customizable Contact Forms, Survey, Quiz, & Conversational Form Builder <= 5.2.12 - IP-Spoofing 0.3%
  • CVE-2024-13568 High 7.5 Fluent Support – Helpdesk & Customer Support Ticket System <= 1.8.5 - Unauthenticated Sensitive Information Exposure Through Unprotected Directory 0.4%
  • CVE-2024-10646 High 7.2 Contact Form Plugin by Fluent Forms for Quiz, Survey, and Drag & Drop WP Form Builder <= 5.2.6 - Unauthenticated Stored Cross-Site Scripting via Form Subject 0.4%
  • CVE-2024-9511 Critical 9.8 FluentSMTP – WP SMTP Plugin with Amazon SES, SendGrid, MailGun, Postmark, Google and Any SMTP Provider <= 2.2.82 - Unauthenticated PHP Object Injection 1.2%
  • CVE-2024-9528 Medium 4.9 Contact Form Plugin by Fluent Forms for Quiz, Survey, and Drag & Drop WP Form Builder <= 5.1.19 - Authenticated (Form Manager+) Stored Cross-Site Scripting 0.4%
  • CVE-2024-5053 Medium 4.2 Contact Form Plugin by Fluent Forms for Quiz, Survey, and Drag & Drop WP Form Builder <= 5.1.18 - Missing Authorization to Authenticated (Subscriber+) Mailchimp Integration Modification 0.4%