Techjewel vulnerabilities

Products

• Fluent Forms – Customizable Contact Forms, Survey, Quiz, & Conversational Form Builder 32
• Fluent Forms Pro Add On Pack 10
• Ninja Tables – Easy Data Table Builder 4
• Fluent Support – Helpdesk & Customer Support Ticket System 3
• Fluent Booking – The Ultimate Appointments Scheduling, Events Booking, Events Calendar Solution 2

Newest

• techjewel fluent support – helpdesk & customer support ticket system Fluent Support <= 2.4.7 — Unauthenticated Limited Modification of Linked Customer Profile Fields via Fluent Forms Feed CVE-2026-119213 3.7 LowNovember 7, 2026
• techjewel fluent forms – customizable contact forms, survey, quiz, & conversational form builder Fluent Forms <= 6.2.5 - Missing Authorization to Authenticated (Custom+) Sensitive Data Exposure and Modification CVE-2026-15178 5.4 MediumOctober 10, 2026
• techjewel fluent forms – customizable contact forms, survey, quiz, & conversational form builder Fluent Forms <= 6.2.14 - Reflected Cross-Site Scripting via '{get.*}' Editor SmartCode Parameter CVE-2026-101324 4.7 MediumOctober 10, 2026
• fluent forms free vs pro forms pro add on pack, techjewel fluent forms pro add on pack +1 more WordPress Fluent Forms Pro Add On Pack plugin <= 6.2.13 - Cross Site Scripting (XSS) vulnerability CVE-2026-94675 7.1 HighOctober 6, 2026
• techjewel fluent forms pro add on pack WordPress Fluent Forms Pro Add On Pack plugin <= 6.2.13 - Broken Access Control vulnerability CVE-2026-94669 5.3 MediumOctober 5, 2026
• techjewel fluent forms pro add on pack WordPress Fluent Forms Pro Add On Pack plugin <= 6.2.12 - Privilege Escalation vulnerability CVE-2026-81297 7.5 HighAugust 31, 2026
• techjewel fluent forms pro add on pack WordPress Fluent Forms Pro Add On Pack plugin <= 6.2.12 - Broken Access Control vulnerability CVE-2026-81296 7.5 HighAugust 31, 2026
• techjewel fluent forms pro add on pack WordPress Fluent Forms Pro Add On Pack plugin < 6.2.12 - Cross Site Scripting (XSS) vulnerability CVE-2026-66633 7.1 HighAugust 18, 2026
• techjewel fluent forms – customizable contact forms, survey, quiz, & conversational form builder Fluent Forms <= 6.2.11 - Unauthenticated Stored Cross-Site Scripting via Notification Smartcode Values CVE-2026-18146 7.2 HighAugust 13, 2026
• techjewel fluent forms – customizable contact forms, survey, quiz, & conversational form builder Fluent Forms <= 6.2.8 - Reflected Cross-Site Scripting via 'param' CVE-2026-17571 6.1 MediumAugust 1, 2026
• techjewel fluent forms – customizable contact forms, survey, quiz, & conversational form builder Fluent Forms <= 6.2.8 - Unauthenticated Sensitive Information Exposure via Insecure Direct Object Reference and Weak Transaction Hash in 'transaction' Parameter CVE-2026-17567 5.3 MediumJuly 31, 2026
• techjewel fluent forms – customizable contact forms, survey, quiz, & conversational form builder Fluent Forms <= 6.2.7 - Unauthenticated Stored Cross-Site Scripting via Name Field Nested `password` Member CVE-2026-16655 7.2 HighJuly 29, 2026
• techjewel fluent forms pro add on pack Fluent Forms Pro Add On Pack <= 6.2.6 - Authenticated (Subscriber+) PHP Object Injection to Arbitrary User Password Change via User Meta Field CVE-2026-15962 8.8 HighJuly 26, 2026
• techjewel fluent support – helpdesk & customer support ticket system Fluent Support <= 2.3.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'redirect-to' Shortcode Attribute CVE-2026-15665 6.4 MediumJuly 24, 2026
• techjewel fluent forms – customizable contact forms, survey, quiz, & conversational form builder Fluent Forms <= 6.2.1 - Incorrect Authorization to Authenticated (Subscriber+) Arbitrary Subscription Cancellation via 'subscription_id' CVE-2026-5069 5.4 MediumJuly 10, 2026
• shahjahan jewel wp gdpr cookie consent WP GDPR Cookie Consent <= 1.0.0 - Authenticated (Subscriber+) Stored Cross-Site Scripting via 'ninja_gdpr_ajax_actions' AJAX Action CVE-2026-8977 6.4 MediumJune 9, 2026
• techjewel fluentcrm – email newsletter, automation, email marketing, email campaigns, optins, leads, and crm solution FluentCRM <= 2.9.87 - Unauthenticated Blind Server-Side Request Forgery via 'SubscribeURL' Parameter CVE-2026-7798 5.4 MediumMay 22, 2026
• techjewel fluent forms – customizable contact forms, survey, quiz, & conversational form builder Fluent Forms <= 6.2.0 - Authenticated (Subscriber+) Authorization Bypass via 'table' Parameter CVE-2026-5395 8.2 HighMay 14, 2026
• techjewel fluent forms – customizable contact forms, survey, quiz, & conversational form builder Fluent Forms <= 6.1.21 - Authenticated (Subscriber+) Authorization Bypass via 'form_id' Parameter CVE-2026-5396 8.2 HighMay 14, 2026
• techjewel fluent forms – customizable contact forms, survey, quiz, & conversational form builder Fluent Forms <= 6.2.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'permission_message' Shortcode Attribute CVE-2026-6828 6.4 MediumMay 13, 2026
• techjewel fluent forms – customizable contact forms, survey, quiz, & conversational form builder Fluent Forms <= 6.2.1 - Authenticated (Administrator+) Arbitrary File Read via Path Traversal in Email Attachment CVE-2026-6344 4.9 MediumMay 6, 2026
• techjewel ninja tables – easy data table builder Ninja Tables <= 5.2.6 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Table Creation CVE-2026-2306 4.3 MediumMay 6, 2026
• techjewel fluent forms – customizable contact forms, survey, quiz, & conversational form builder Fluent Forms – Customizable Contact Forms, Survey, Quiz, & Conversational Form Builder <= 6.1.21 - Insecure Direct Object Reference in Stripe SCA Confirmation to Unauthenticated Payment Status Modific… CVE-2026-4160 5.3 MediumApril 16, 2026
• techjewel fluent booking – the ultimate appointments scheduling, events booking, events calendar solution Fluent Booking <= 2.0.01 - Unauthenticated Stored Cross-Site Scripting via Multiple Parameters CVE-2026-2231 7.2 HighMarch 26, 2026
• techjewel fluent forms pro add on pack Fluent Forms Pro Add On Pack <= 6.1.17 - Missing Authorization to Unauthenticated Arbitrary Attachment Deletion CVE-2026-2899 6.5 MediumMarch 5, 2026
• techjewel fluent forms pro add on pack Fluent Forms Pro <= 6.1.17 - Unauthenticated Stored Cross-Site Scripting via Draft Form Submission CVE-2026-2365 7.2 HighMarch 5, 2026
• techjewel fluent forms pro add on pack Fluent Forms Pro Add On Pack <= 6.1.17 - Missing Authorization to Unauthenticated Payment Status modification CVE-2026-2428 7.5 HighFebruary 27, 2026
• techjewel fluent forms – customizable contact forms, survey, quiz, & conversational form builder Fluent Forms <= 6.1.14 - Authenticated (Subscriber+) Stored Cross-Site Scripting via AI Form Builder Module CVE-2026-0996 6.4 MediumFebruary 10, 2026
• techjewel fluent forms pro add on pack Fluent Forms Pro Add On Pack <= 6.1.12 - Authenticated (Subscriber+) Server-Side Request Forgery via 'saveDataSource' CVE-2026-0632 5.4 MediumFebruary 9, 2026
• techjewel fluent forms – customizable contact forms, survey, quiz, & conversational form builder Fluent Forms <= 6.1.7 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Form Creation via AI Builder CVE-2025-13722 5.3 MediumJanuary 7, 2026
• techjewel fluentauth – the ultimate authorization & security plugin for wordpress FluentAuth - Auth Security Plugin <= 2.0.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'fluent_auth_reset_password' Shortcode CVE-2025-13728 6.4 MediumDecember 15, 2025
• techjewel fluent forms – customizable contact forms, survey, quiz, & conversational form builder Fluent Forms <= 6.1.7 - Unauthenticated Insecure Direct Object Reference to Payment Status Tampering via submission_id CVE-2025-13748 5.3 MediumDecember 6, 2025
• techjewel fluent booking – the ultimate appointments scheduling, events booking, events calendar solution Fluent Booking – The Ultimate Appointments Scheduling, Events Booking, Events Calendar Solution <= 1.9.11 - Authenticated (Subscriber+) Missing Authorization to Calendar Import and Management CVE-2025-13756 4.3 MediumDecember 3, 2025
• techjewel fluentcrm – email newsletter, automation, email marketing, email campaigns, optins, leads, and crm solution FluentCRM - Marketing Automation For WordPress <= 2.9.84 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'fluentcrm_content' Shortcode CVE-2025-12935 6.4 MediumNovember 21, 2025
• techjewel fluent forms – customizable contact forms, survey, quiz, & conversational form builder Fluent Forms – Customizable Contact Forms, Survey, Quiz, & Conversational Form Builder 5.1.16 - 6.1.1 - Authenticated (Subscriber+) PHP Object Injection To Arbitrary File Read CVE-2025-9260 6.5 MediumSeptember 2, 2025
• techjewel ninja tables – easy data table builder, wpmanageninja ninja tables +1 more Ninja Tables – Easy Data Table Builder <= 5.0.18 - Unauthenticated Server-Side Request Forgery CVE-2025-2940 7.2 HighJune 27, 2025
• techjewel ninja tables – easy data table builder, wpmanageninja ninja tables +1 more Ninja Tables – Easy Data Table Builder <= 5.0.18 - Unauthenticated PHP Object Injection to Limited Remote Code Execution CVE-2025-2939 5.6 MediumJune 3, 2025
• techjewel fluent forms – customizable contact forms, survey, quiz, & conversational form builder Fluent Forms <= 6.0.2 - Authenticated (Contributor+) Stored Cross-Site Scripting CVE-2025-3615 6.4 MediumApril 17, 2025
• techjewel fluent forms – customizable contact forms, survey, quiz, & conversational form builder Fluent Forms – Customizable Contact Forms, Survey, Quiz, & Conversational Form Builder <= 5.2.12 - IP-Spoofing CVE-2024-13666 5.3 MediumMarch 22, 2025
• techjewel fluent support – helpdesk & customer support ticket system, wpmanageninja fluent support +1 more Fluent Support – Helpdesk & Customer Support Ticket System <= 1.8.5 - Unauthenticated Sensitive Information Exposure Through Unprotected Directory CVE-2024-13568 7.5 HighMarch 1, 2025
• fluentforms contact form, techjewel fluent forms – customizable contact forms, survey, quiz, & conversational form builder +1 more Contact Form Plugin by Fluent Forms for Quiz, Survey, and Drag & Drop WP Form Builder <= 5.2.6 - Unauthenticated Stored Cross-Site Scripting via Form Subject CVE-2024-10646 7.2 HighDecember 14, 2024
• techjewel fluentsmtp – wp smtp plugin with amazon ses, sendgrid, mailgun, postmark, google and any smtp provider, wpmanageninja fluentsmtp +1 more FluentSMTP – WP SMTP Plugin with Amazon SES, SendGrid, MailGun, Postmark, Google and Any SMTP Provider <= 2.2.82 - Unauthenticated PHP Object Injection CVE-2024-9511 9.8 CriticalNovember 23, 2024
• fluentforms contact form, techjewel fluent forms – customizable contact forms, survey, quiz, & conversational form builder +1 more Contact Form Plugin by Fluent Forms for Quiz, Survey, and Drag & Drop WP Form Builder <= 5.1.19 - Authenticated (Form Manager+) Stored Cross-Site Scripting CVE-2024-9528 4.9 MediumOctober 5, 2024
• fluentforms contact form, techjewel fluent forms – customizable contact forms, survey, quiz, & conversational form builder +1 more Contact Form Plugin by Fluent Forms for Quiz, Survey, and Drag & Drop WP Form Builder <= 5.1.18 - Missing Authorization to Authenticated (Subscriber+) Mailchimp Integration Modification CVE-2024-5053 4.2 MediumSeptember 1, 2024
• wpmanageninja ninja tables, techjewel ninja tables – easy data table builder +1 more Ninja Tables – Easiest Data Table Builder <= 5.0.12 - Authenticated (Author+) Stored Cross-Site Scripting via SVG File Upload CVE-2024-7304 6.4 MediumAugust 27, 2024
• fluentforms contact form, techjewel fluent forms – customizable contact forms, survey, quiz, & conversational form builder +1 more Contact Form Plugin by Fluent Forms for Quiz, Survey, and Drag & Drop WP Form Builder <= 5.1.19 - Authenticated (Subscriber+) Stored Cross-Site Scripting via Welcome Screen Fields CVE-2024-6703 4.9 MediumJuly 27, 2024
• fluentforms contact form, techjewel fluent forms – customizable contact forms, survey, quiz, & conversational form builder +1 more Contact Form Plugin by Fluent Forms for Quiz, Survey, and Drag & Drop WP Form Builder <= 5.1.19 - Authenticated (Administrator+) Stored Cross-Site Scripting CVE-2024-6518 4.4 MediumJuly 27, 2024
• fluentforms contact form, web-dorado wp form builder, techjewel fluent forms – customizable contact forms, survey, quiz, & conversational form builder +2 more Contact Form Plugin by Fluent Forms for Quiz, Survey, and Drag & Drop WP Form Builder <= 5.1.19 - Authenticated (Administrator+) Stored Cross-Site Scripting CVE-2024-6520 4.4 MediumJuly 27, 2024
• fluentforms contact form, techjewel fluent forms – customizable contact forms, survey, quiz, & conversational form builder +1 more Contact Form Plugin by Fluent Forms for Quiz, Survey, and Drag & Drop WP Form Builder <= 5.1.19 - Authenticated (Administrator+) Stored Cross-Site Scripting CVE-2024-6521 4.4 MediumJuly 27, 2024
• fluentforms contact form, techjewel fluent forms – customizable contact forms, survey, quiz, & conversational form builder +1 more Contact Form Plugin by Fluent Forms for Quiz, Survey, and Drag & Drop WP Form Builder <= 5.1.15 - PHP Object Injection via extractDynamicValues CVE-2024-4157 Public exploit 7.5 HighMay 22, 2024
• Show olderLoading…