Skip to content
Fluentforms vulnerabilities
Newest
-
fluentforms contact form, techjewel fluent forms – customizable contact forms, survey, quiz, & conversational form builder +1 more
Contact Form Plugin by Fluent Forms for Quiz, Survey, and Drag & Drop WP Form Builder <= 5.2.6 - Unauthenticated Stored Cross-Site Scripting via Form Subject
CVE-2024-10646
7.2 High
-
fluentforms contact form, unknown fluent forms +1 more
Contact Form Plugin by Fluent Forms < 5.2.1 - Admin+ Stored XSS
CVE-2024-9651
6.1 Medium
-
fluentforms contact form, techjewel fluent forms – customizable contact forms, survey, quiz, & conversational form builder +1 more
Contact Form Plugin by Fluent Forms for Quiz, Survey, and Drag & Drop WP Form Builder <= 5.1.19 - Authenticated (Form Manager+) Stored Cross-Site Scripting
CVE-2024-9528
4.9 Medium
-
fluentforms contact form, techjewel fluent forms – customizable contact forms, survey, quiz, & conversational form builder +1 more
Contact Form Plugin by Fluent Forms for Quiz, Survey, and Drag & Drop WP Form Builder <= 5.1.18 - Missing Authorization to Authenticated (Subscriber+) Mailchimp Integration Modification
CVE-2024-5053
4.2 Medium
-
fluentforms contact form, techjewel fluent forms – customizable contact forms, survey, quiz, & conversational form builder +1 more
Contact Form Plugin by Fluent Forms for Quiz, Survey, and Drag & Drop WP Form Builder <= 5.1.19 - Authenticated (Subscriber+) Stored Cross-Site Scripting via Welcome Screen Fields
CVE-2024-6703
4.9 Medium
-
fluentforms contact form, techjewel fluent forms – customizable contact forms, survey, quiz, & conversational form builder +1 more
Contact Form Plugin by Fluent Forms for Quiz, Survey, and Drag & Drop WP Form Builder <= 5.1.19 - Authenticated (Administrator+) Stored Cross-Site Scripting
CVE-2024-6518
4.4 Medium
-
fluentforms contact form, web-dorado wp form builder, techjewel fluent forms – customizable contact forms, survey, quiz, & conversational form builder +2 more
Contact Form Plugin by Fluent Forms for Quiz, Survey, and Drag & Drop WP Form Builder <= 5.1.19 - Authenticated (Administrator+) Stored Cross-Site Scripting
CVE-2024-6520
4.4 Medium
-
fluentforms contact form, techjewel fluent forms – customizable contact forms, survey, quiz, & conversational form builder +1 more
Contact Form Plugin by Fluent Forms for Quiz, Survey, and Drag & Drop WP Form Builder <= 5.1.19 - Authenticated (Administrator+) Stored Cross-Site Scripting
CVE-2024-6521
4.4 Medium
-
fluentforms contact form, techjewel fluent forms – customizable contact forms, survey, quiz, & conversational form builder +1 more
Contact Form Plugin by Fluent Forms for Quiz, Survey, and Drag & Drop WP Form Builder <= 5.1.15 - PHP Object Injection via extractDynamicValues
CVE-2024-4157
Public exploit
7.5 High
-
fluentforms contact form, techjewel fluent forms – customizable contact forms, survey, quiz, & conversational form builder +1 more
Contact Form Plugin by Fluent Forms for Quiz, Survey, and Drag & Drop WP Form Builder <= 5.1.16 - Authenticated (Contributor+) Stored Cross-Site Scripting
CVE-2024-4709
6.4 Medium
-
fluentforms contact form, techjewel fluent forms – customizable contact forms, survey, quiz, & conversational form builder +1 more
Contact Form Plugin by Fluent Forms for Quiz, Survey, and Drag & Drop WP Form Builder <= 5.1.13 - Authenticated (Subscriber+) Stored Cross-Site Scripting
CVE-2024-2772
6.4 Medium
-
fluentforms contact form, techjewel fluent forms – customizable contact forms, survey, quiz, & conversational form builder +1 more
Contact Form Plugin by Fluent Forms for Quiz, Survey, and Drag & Drop WP Form Builder <= 5.1.16 - Missing Authorization to Setting Manipulation
CVE-2024-2782
Public exploit
7.5 High
-
fluentforms contact form, techjewel fluent forms – customizable contact forms, survey, quiz, & conversational form builder +1 more
Contact Form Plugin by Fluent Forms for Quiz, Survey, and Drag & Drop WP Form Builder <= 5.1.16 - Missing Authorization to Settings Update and Limited Privilege Escalation
CVE-2024-2771
Public exploit
9.8 Critical
-
fluentforms contact form, techjewel fluent forms – customizable contact forms, survey, quiz, & conversational form builder +1 more
Fluent Forms <= 5.1.9 - Authenticated (Contributor+) Stored Cross-Site Scripting
CVE-2023-6957
4.9 Medium
-
fluentforms contact form, techjewel fluent forms – customizable contact forms, survey, quiz, & conversational form builder +1 more
Fluent Forms <= 5.1.5 - Authenticated(Administrator+) Stored Cross-Site Scripting via imported form title
CVE-2024-0618
4.4 Medium
-
contact form - wpmanageninja llc form plugin – fastest contact form builder plugin for wordpress by fluent forms, fluentforms contact form +1 more
WordPress FluentForm Plugin <= 4.3.25 is vulnerable to SQL Injection
CVE-2023-24410
5.5 Medium
-
fluentforms contact form, unknown contact form plugin +1 more
FluentForms < 4.3.25 - Contributor+ Stored XSS via Custom HTML Form Field
CVE-2023-0546
5.4 Medium
-
fluentforms contact form, contact form - wpmanageninja llc form plugin – fastest contact form builder plugin for wordpress by fluent forms, unknown contact form plugin – fastest contact form builder plugin for wordpress by fluent forms +2 more
FluentForm < 4.3.13 - CSV Injection
CVE-2022-3463
9.8 Critical
-
wp manage ninja fluent forms, fluentforms contact form +1 more
CSRF in WP Fluent Forms < 3.6.67 allows stored XSS and Privilege Escalation
CVE-2021-34620
8.8 High