Fluentforms Contact Form vulnerabilities

• fluentforms contact form, techjewel fluent forms – customizable contact forms, survey, quiz, & conversational form builder +1 more Contact Form Plugin by Fluent Forms for Quiz, Survey, and Drag & Drop WP Form Builder <= 5.2.6 - Unauthenticated Stored Cross-Site Scripting via Form Subject CVE-2024-10646 7.2 HighDecember 14, 2024
• fluentforms contact form, unknown fluent forms +1 more Contact Form Plugin by Fluent Forms < 5.2.1 - Admin+ Stored XSS CVE-2024-9651 6.1 MediumDecember 9, 2024
• fluentforms contact form, techjewel fluent forms – customizable contact forms, survey, quiz, & conversational form builder +1 more Contact Form Plugin by Fluent Forms for Quiz, Survey, and Drag & Drop WP Form Builder <= 5.1.19 - Authenticated (Form Manager+) Stored Cross-Site Scripting CVE-2024-9528 4.9 MediumOctober 5, 2024
• fluentforms contact form, techjewel fluent forms – customizable contact forms, survey, quiz, & conversational form builder +1 more Contact Form Plugin by Fluent Forms for Quiz, Survey, and Drag & Drop WP Form Builder <= 5.1.18 - Missing Authorization to Authenticated (Subscriber+) Mailchimp Integration Modification CVE-2024-5053 4.2 MediumSeptember 1, 2024
• fluentforms contact form, techjewel fluent forms – customizable contact forms, survey, quiz, & conversational form builder +1 more Contact Form Plugin by Fluent Forms for Quiz, Survey, and Drag & Drop WP Form Builder <= 5.1.19 - Authenticated (Subscriber+) Stored Cross-Site Scripting via Welcome Screen Fields CVE-2024-6703 4.9 MediumJuly 27, 2024
• fluentforms contact form, techjewel fluent forms – customizable contact forms, survey, quiz, & conversational form builder +1 more Contact Form Plugin by Fluent Forms for Quiz, Survey, and Drag & Drop WP Form Builder <= 5.1.19 - Authenticated (Administrator+) Stored Cross-Site Scripting CVE-2024-6518 4.4 MediumJuly 27, 2024
• fluentforms contact form, web-dorado wp form builder, techjewel fluent forms – customizable contact forms, survey, quiz, & conversational form builder +2 more Contact Form Plugin by Fluent Forms for Quiz, Survey, and Drag & Drop WP Form Builder <= 5.1.19 - Authenticated (Administrator+) Stored Cross-Site Scripting CVE-2024-6520 4.4 MediumJuly 27, 2024
• fluentforms contact form, techjewel fluent forms – customizable contact forms, survey, quiz, & conversational form builder +1 more Contact Form Plugin by Fluent Forms for Quiz, Survey, and Drag & Drop WP Form Builder <= 5.1.19 - Authenticated (Administrator+) Stored Cross-Site Scripting CVE-2024-6521 4.4 MediumJuly 27, 2024
• fluentforms contact form, techjewel fluent forms – customizable contact forms, survey, quiz, & conversational form builder +1 more Contact Form Plugin by Fluent Forms for Quiz, Survey, and Drag & Drop WP Form Builder <= 5.1.15 - PHP Object Injection via extractDynamicValues CVE-2024-4157 Public exploit 7.5 HighMay 22, 2024
• fluentforms contact form, techjewel fluent forms – customizable contact forms, survey, quiz, & conversational form builder +1 more Contact Form Plugin by Fluent Forms for Quiz, Survey, and Drag & Drop WP Form Builder <= 5.1.16 - Authenticated (Contributor+) Stored Cross-Site Scripting CVE-2024-4709 6.4 MediumMay 18, 2024
• fluentforms contact form, techjewel fluent forms – customizable contact forms, survey, quiz, & conversational form builder +1 more Contact Form Plugin by Fluent Forms for Quiz, Survey, and Drag & Drop WP Form Builder <= 5.1.13 - Authenticated (Subscriber+) Stored Cross-Site Scripting CVE-2024-2772 6.4 MediumMay 18, 2024
• fluentforms contact form, techjewel fluent forms – customizable contact forms, survey, quiz, & conversational form builder +1 more Contact Form Plugin by Fluent Forms for Quiz, Survey, and Drag & Drop WP Form Builder <= 5.1.16 - Missing Authorization to Setting Manipulation CVE-2024-2782 Public exploit 7.5 HighMay 18, 2024
• fluentforms contact form, techjewel fluent forms – customizable contact forms, survey, quiz, & conversational form builder +1 more Contact Form Plugin by Fluent Forms for Quiz, Survey, and Drag & Drop WP Form Builder <= 5.1.16 - Missing Authorization to Settings Update and Limited Privilege Escalation CVE-2024-2771 Public exploit 9.8 CriticalMay 18, 2024
• fluentforms contact form, techjewel fluent forms – customizable contact forms, survey, quiz, & conversational form builder +1 more Fluent Forms <= 5.1.9 - Authenticated (Contributor+) Stored Cross-Site Scripting CVE-2023-6957 4.9 MediumMarch 13, 2024
• fluentforms contact form, techjewel fluent forms – customizable contact forms, survey, quiz, & conversational form builder +1 more Fluent Forms <= 5.1.5 - Authenticated(Administrator+) Stored Cross-Site Scripting via imported form title CVE-2024-0618 4.4 MediumJanuary 27, 2024
• contact form - wpmanageninja llc form plugin – fastest contact form builder plugin for wordpress by fluent forms, fluentforms contact form +1 more WordPress FluentForm Plugin <= 4.3.25 is vulnerable to SQL Injection CVE-2023-24410 5.5 MediumOctober 31, 2023
• fluentforms contact form, unknown contact form plugin +1 more FluentForms < 4.3.25 - Contributor+ Stored XSS via Custom HTML Form Field CVE-2023-0546 5.4 MediumApril 10, 2023
• fluentforms contact form, contact form - wpmanageninja llc form plugin – fastest contact form builder plugin for wordpress by fluent forms, unknown contact form plugin – fastest contact form builder plugin for wordpress by fluent forms +2 more FluentForm < 4.3.13 - CSV Injection CVE-2022-3463 9.8 CriticalNovember 7, 2022
• wp manage ninja fluent forms, fluentforms contact form +1 more CSRF in WP Fluent Forms < 3.6.67 allows stored XSS and Privilege Escalation CVE-2021-34620 8.8 HighJuly 7, 2021