Fluent Forms (Unknown) - vulnerabilities (CVEs)

4 CVEs, 0 in the last 30 days, 2 known versions, newest CVE from 2026-07-30. Vendor: Unknown.

CVEs of Fluent Forms

• CVE-2026-11881 - CVSS 6.1 (medium), 2026-07-30: The Fluent Forms WordPress plugin before 6.2.6 does not sanitise and escape one of its form field configuration settings before outputting it inside an inline…
• CVE-2026-11578 - CVSS 2.7 (low), 2026-07-02: The Fluent Forms WordPress plugin before 6.2.5 does not properly restrict the deletion of form submission entries to the forms a restricted Manager is…
• CVE-2026-11880 - CVSS 3.1 (low), 2026-07-01: The Fluent Forms WordPress plugin before 6.2.1 does not properly verify ownership before processing a subscription cancellation request, allowing…
• CVE-2024-9651 - CVSS 6.1 (medium), 2024-12-09: The Fluent Forms WordPress plugin before 5.2.1 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to…