techjewel Fluent Forms – Customizable Contact Forms, Survey, Quiz, & Conversational Form Builder

• CVE-2026-5395 High 8.2 Fluent Forms <= 6.2.0 - Authenticated (Subscriber+) Authorization Bypass via 'table' Parameter 0.2%
• CVE-2026-5396 High 8.2 Fluent Forms <= 6.1.21 - Authenticated (Subscriber+) Authorization Bypass via 'form_id' Parameter 0.2%
• CVE-2026-6828 Medium 6.4 Fluent Forms <= 6.2.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'permission_message' Shortcode Attribute 0.2%
• CVE-2026-6344 Medium 4.9 Fluent Forms <= 6.2.1 - Authenticated (Administrator+) Arbitrary File Read via Path Traversal in Email Attachment 0.6%
• CVE-2026-4160 Medium 5.3 Fluent Forms – Customizable Contact Forms, Survey, Quiz, & Conversational Form Builder <= 6.1.21 - Insecure Direct Object Reference in Stripe SCA Confirmation to Unauthenticated Payment Status Modification 0.3%
• CVE-2026-0996 Medium 6.4 Fluent Forms <= 6.1.14 - Authenticated (Subscriber+) Stored Cross-Site Scripting via AI Form Builder Module 0.3%
• CVE-2025-13722 Medium 5.3 Fluent Forms <= 6.1.7 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Form Creation via AI Builder 0.2%
• CVE-2025-13748 Medium 5.3 Fluent Forms <= 6.1.7 - Unauthenticated Insecure Direct Object Reference to Payment Status Tampering via submission_id 0.3%
• CVE-2025-9260 Medium 6.5 Fluent Forms – Customizable Contact Forms, Survey, Quiz, & Conversational Form Builder 5.1.16 - 6.1.1 - Authenticated (Subscriber+) PHP Object Injection To Arbitrary File Read 0.6%
• CVE-2025-3615 Medium 6.4 Fluent Forms <= 6.0.2 - Authenticated (Contributor+) Stored Cross-Site Scripting 0.3%
• CVE-2024-13666 Medium 5.3 Fluent Forms – Customizable Contact Forms, Survey, Quiz, & Conversational Form Builder <= 5.2.12 - IP-Spoofing 0.3%
• CVE-2024-10646 High 7.2 Contact Form Plugin by Fluent Forms for Quiz, Survey, and Drag & Drop WP Form Builder <= 5.2.6 - Unauthenticated Stored Cross-Site Scripting via Form Subject 0.4%
• CVE-2024-9528 Medium 4.9 Contact Form Plugin by Fluent Forms for Quiz, Survey, and Drag & Drop WP Form Builder <= 5.1.19 - Authenticated (Form Manager+) Stored Cross-Site Scripting 0.4%
• CVE-2024-5053 Medium 4.2 Contact Form Plugin by Fluent Forms for Quiz, Survey, and Drag & Drop WP Form Builder <= 5.1.18 - Missing Authorization to Authenticated (Subscriber+) Mailchimp Integration Modification 0.4%
• CVE-2024-6703 Medium 4.9 Contact Form Plugin by Fluent Forms for Quiz, Survey, and Drag & Drop WP Form Builder <= 5.1.19 - Authenticated (Subscriber+) Stored Cross-Site Scripting via Welcome Screen Fields 0.3%
• CVE-2024-6518 Medium 4.4 Contact Form Plugin by Fluent Forms for Quiz, Survey, and Drag & Drop WP Form Builder <= 5.1.19 - Authenticated (Administrator+) Stored Cross-Site Scripting 0.3%
• CVE-2024-6520 Medium 4.4 Contact Form Plugin by Fluent Forms for Quiz, Survey, and Drag & Drop WP Form Builder <= 5.1.19 - Authenticated (Administrator+) Stored Cross-Site Scripting 0.3%
• CVE-2024-6521 Medium 4.4 Contact Form Plugin by Fluent Forms for Quiz, Survey, and Drag & Drop WP Form Builder <= 5.1.19 - Authenticated (Administrator+) Stored Cross-Site Scripting 0.3%
• CVE-2024-4157 High 7.5 Contact Form Plugin by Fluent Forms for Quiz, Survey, and Drag & Drop WP Form Builder <= 5.1.15 - PHP Object Injection via extractDynamicValues 0.7%
• CVE-2024-4709 Medium 6.4 Contact Form Plugin by Fluent Forms for Quiz, Survey, and Drag & Drop WP Form Builder <= 5.1.16 - Authenticated (Contributor+) Stored Cross-Site Scripting 0.4%
• CVE-2024-2772 Medium 6.4 Contact Form Plugin by Fluent Forms for Quiz, Survey, and Drag & Drop WP Form Builder <= 5.1.13 - Authenticated (Subscriber+) Stored Cross-Site Scripting 0.3%
• CVE-2024-2782 High 7.5 Contact Form Plugin by Fluent Forms for Quiz, Survey, and Drag & Drop WP Form Builder <= 5.1.16 - Missing Authorization to Setting Manipulation 1.2%
• CVE-2024-2771 Critical 9.8 Contact Form Plugin by Fluent Forms for Quiz, Survey, and Drag & Drop WP Form Builder <= 5.1.16 - Missing Authorization to Settings Update and Limited Privilege Escalation 2.3%
• CVE-2023-6957 Medium 4.9 Fluent Forms <= 5.1.9 - Authenticated (Contributor+) Stored Cross-Site Scripting 0.4%
• CVE-2024-0618 Medium 4.4 Fluent Forms <= 5.1.5 - Authenticated(Administrator+) Stored Cross-Site Scripting via imported form title 0.5%