Log in Start free

WPManageNinja

Products

ProductCVEsExploitedLatest
Fluent Forms – Customizable Contact Forms, Survey, Quiz, & Conversational Form Builder7–Oct 10, 2026
FluentCart A New Era of eCommerce – Faster, Lighter, and Simpler4–Nov 3, 2026
Best Payments Plugin for WP2–Oct 14, 2026
Fluent Support2–Sep 23, 2026
Fluent Support – Helpdesk & Customer Support Ticket System2–Nov 7, 2026
FluentCart2–Oct 15, 2026
Ninja Tables2–Aug 6, 2026
FluentSMTP – WP SMTP Plugin with Amazon SES, SendGrid, Mailgun, Postmark, Cloudflare, toSend, Gmail and Any SMTP1–Aug 6, 2026
Ninja Tables Pro1–Aug 13, 2026
Fluent CRM1–Jul 13, 2026
Fluent Forms Pro1–Aug 13, 2026
Fluent Forms Pro Add On Pack1–Aug 18, 2026
Fluent PDF Generator1–Feb 5, 2024
FluentCommunity1–Aug 13, 2026

Exploited and recent CVEs

  • CVE-2026-119213 Low 3.7 Fluent Support <= 2.4.7 — Unauthenticated Limited Modification of Linked Customer Profile Fields via Fluent Forms Feed –
  • CVE-2026-120577 High 8.1 FluentCart A New Era of eCommerce <= 1.6.2 - Authenticated (Custom+) Arbitrary File Deletion via 'file_path' Parameter 0.6%
  • CVE-2026-103525 High 7.5 FluentCart A New Era of eCommerce <= 1.7.0 - Insecure Direct Object Reference to Unauthenticated Sensitive Information Disclosure via 'order_id' and 'billing_address_id' Parameters 0.4%
  • CVE-2026-103518 Medium 4.9 FluentCart A New Era of eCommerce <= 1.7.0 - Authenticated (Administrator+) SQL Injection via 'products.variants' Array Keys 0.4%
  • CVE-2026-109695 High 7.5 WordPress FluentCart plugin <= 1.7.1 - Sensitive Data Exposure vulnerability 0.2%
  • CVE-2026-108484 High 7.1 WordPress Best Payments Plugin for WP plugin <= 4.6.27 - Cross Site Scripting (XSS) vulnerability 0.2%
  • CVE-2026-15178 Medium 5.4 Fluent Forms <= 6.2.5 - Missing Authorization to Authenticated (Custom+) Sensitive Data Exposure and Modification 0.2%
  • CVE-2026-101324 Medium 4.7 Fluent Forms <= 6.2.14 - Reflected Cross-Site Scripting via '{get.*}' Editor SmartCode Parameter 0.2%
  • CVE-2026-94679 Medium 5.4 WordPress Fluent Support plugin <= 2.3.2 - Broken Access Control vulnerability 0.2%
  • CVE-2026-66633 High 7.1 WordPress Fluent Forms Pro Add On Pack plugin < 6.2.12 - Cross Site Scripting (XSS) vulnerability 0.3%
  • CVE-2026-73532 Critical 9.8 Fluent Forms Pro 6.2.7 Embedded Malicious Code via Tampered Plugin Build 0.7%
  • CVE-2026-73533 Critical 9.8 Ninja Tables Pro 5.2.11 Embedded Malicious Code via Tampered Plugin Build 0.6%
  • CVE-2026-66467 Medium 6.5 WordPress FluentCommunity plugin <= 2.7.5 - Cross Site Scripting (XSS) vulnerability 0.2%
  • CVE-2026-18146 High 7.2 Fluent Forms <= 6.2.11 - Unauthenticated Stored Cross-Site Scripting via Notification Smartcode Values 0.5%
  • CVE-2026-61964 High 7.1 WordPress Ninja Tables plugin <= 5.2.9 - Cross Site Scripting (XSS) vulnerability 0.3%
  • CVE-2026-16636 High 7.2 FluentSMTP <= 2.2.95 - Unauthenticated Stored Cross-Site Scripting via Recipient Display Name (to.name) in Email Logs 0.5%
  • CVE-2026-17571 Medium 6.1 Fluent Forms <= 6.2.8 - Reflected Cross-Site Scripting via 'param' 0.4%
  • CVE-2026-17567 Medium 5.3 Fluent Forms <= 6.2.8 - Unauthenticated Sensitive Information Exposure via Insecure Direct Object Reference and Weak Transaction Hash in 'transaction' Parameter 0.6%
  • CVE-2026-16655 High 7.2 Fluent Forms <= 6.2.7 - Unauthenticated Stored Cross-Site Scripting via Name Field Nested `password` Member 0.5%
  • CVE-2026-15665 Medium 6.4 Fluent Support <= 2.3.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'redirect-to' Shortcode Attribute 0.3%
  • CVE-2026-65474 Medium 5.3 WordPress Ninja Tables plugin <= 5.2.10 - Sensitive Data Exposure vulnerability 0.3%
  • CVE-2026-65470 Medium 6.5 WordPress Fluent Support plugin <= 2.3.0 - Cross Site Scripting (XSS) vulnerability 0.2%
  • CVE-2026-57715 High 7.1 WordPress Fluent CRM plugin <= 3.1.7 - Cross Site Scripting (XSS) vulnerability 0.3%
  • CVE-2026-5069 Medium 5.4 Fluent Forms <= 6.2.1 - Incorrect Authorization to Authenticated (Subscriber+) Arbitrary Subscription Cancellation via 'subscription_id' 0.3%
  • CVE-2026-42655 High 7.5 WordPress Best Payments Plugin for WP plugin <= 4.6.19 - Payment Bypass vulnerability 0.2%
  • CVE-2025-67971 High 7.1 WordPress FluentCart plugin < 1.3.0 - Cross Site Scripting (XSS) vulnerability 0.3%
  • CVE-2025-13495 Medium 4.9 FluentCart A New Era of eCommerce <= 1.3.1 - Authenticated (Administrator+) SQL Injection via 'groupKey' Parameter 0.3%
  • CVE-2023-6953 Medium 4.9 PDF Generator For Fluent Forms <= 1.1.7 - Cross-Site Scripting 0.4%