Fluentforms vulnerabilities
We track 4 vulnerabilities in Fluentforms products. 4 are rated high or critical, and none are known to be exploited. The most recent was published on May 18, 2024.
Latest Fluentforms vulnerabilities
- 7.5 High severity
Fluent Forms – Customizable Contact Forms…: Missing Authorization
The Contact Form Plugin by Fluent Forms for Quiz, Survey, and Drag & Drop WP Form Builder plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the /wp-json/fluentform/v1/global-settings REST API endpoint
- 9.8 Critical severity
Fluent Forms – Customizable Contact Forms…: Missing Authorization
The Contact Form Plugin by Fluent Forms for Quiz, Survey, and Drag & Drop WP Form Builder plugin for WordPress is vulnerable to privilege escalation due to a missing capability check on the /wp-json/fluentform/v1/managers REST API endpoint in all versions up t
- 9.8 Critical severity
Contact Form Plugin – Fastest Contact Form…: Improper Neutralization of Special Elements used in an SQL Command
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Contact Form - WPManageNinja LLC Contact Form Plugin – Fastest Contact Form Builder Plugin for WordPress by Fluent Forms fluentform allows SQL Injection.This
- 9.8 Critical severity
Contact Form Plugin – Fastest Contact Form…: Improper Neutralization of Formula Elements in a CSV File
The Contact Form Plugin WordPress plugin before 4.3.13 does not validate and escape fields when exporting form entries as CSV, leading to a CSV injection