WPManageNinja Fluent Forms – Customizable Contact Forms, Survey, Quiz, & Conversational Form Builder
CVE-2026-15178Medium 5.4Fluent Forms <= 6.2.5 - Missing Authorization to Authenticated (Custom+) Sensitive Data Exposure and Modification0.2%
CVE-2026-101324Medium 4.7Fluent Forms <= 6.2.14 - Reflected Cross-Site Scripting via '{get.*}' Editor SmartCode Parameter0.2%
CVE-2026-18146High 7.2Fluent Forms <= 6.2.11 - Unauthenticated Stored Cross-Site Scripting via Notification Smartcode Values0.5%
CVE-2026-17571Medium 6.1Fluent Forms <= 6.2.8 - Reflected Cross-Site Scripting via 'param'0.4%
CVE-2026-17567Medium 5.3Fluent Forms <= 6.2.8 - Unauthenticated Sensitive Information Exposure via Insecure Direct Object Reference and Weak Transaction Hash in 'transaction' Parameter0.6%
CVE-2026-16655High 7.2Fluent Forms <= 6.2.7 - Unauthenticated Stored Cross-Site Scripting via Name Field Nested `password` Member0.5%
CVE-2026-5069Medium 5.4Fluent Forms <= 6.2.1 - Incorrect Authorization to Authenticated (Subscriber+) Arbitrary Subscription Cancellation via 'subscription_id'0.3%