Techjewel vulnerabilities
We track 12 vulnerabilities in Techjewel products across 6 products. 12 are rated high or critical, and none are known to be exploited. The most recent was published on July 26, 2026.
Latest Techjewel vulnerabilities
- 8.8 High severity
Fluent Forms Pro Add On Pack: Deserialization of Untrusted Data
The Fluent Forms Pro Add On Pack plugin for WordPress is vulnerable to PHP Object Injection in all versions up to, and including, 6.2.6 via deserialization of untrusted input. This makes it possible for authenticated attackers, with Subscriber-level access and
- 8.2 High severity
Fluent Forms – Customizable Contact Forms…: Authorization Bypass Through User-Controlled Key
The Fluent Forms – Customizable Contact Forms, Survey, Quiz, & Conversational Form Builder plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions up to, and including, 6.2.0 via the exportEntries function due to missing validati
- 8.2 High severity
Fluent Forms – Customizable Contact Forms…: Authorization Bypass Through User-Controlled Key
The Fluent Forms plugin for WordPress is vulnerable to Authorization Bypass Through User-Controlled Key in all versions up to, and including, 6.1.21. This is due to the SubmissionPolicy class authorizing submission-level actions (read, modify, delete, add note
- 7.2 High severity
Fluent Booking – The Ultimate Appointments…: Improper Neutralization of Input During Web Page Generation
The Fluent Booking plugin for WordPress is vulnerable to Stored Cross-Site Scripting via multiple parameters in all versions up to, and including, 2.0.01 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated att
- 7.2 High severity
Fluent Forms Pro Add On Pack: Improper Neutralization of Input During Web Page Generation
The Fluent Forms Pro plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the `fluentform_step_form_save_data` AJAX action in all versions up to, and including, 6.1.17. This is due to the draft form submission endpoint being publicly accessibl
- 7.5 High severity
Fluent Forms Pro Add On Pack: Insufficient Verification of Data Authenticity
The Fluent Forms Pro Add On Pack plugin for WordPress is vulnerable to Insufficient Verification of Data Authenticity in all versions up to, and including, 6.1.17. This is due to the PayPal IPN (Instant Payment Notification) verification being disabled by defa
- 7.2 High severity
Ninja Tables – Easy Data Table Builder: Server-Side Request Forgery
The Ninja Tables – Easy Data Table Builder plugin for WordPress is vulnerable to Server-Side Request Forgery in all versions up to, and including, 5.0.18 via the args[url] parameter. This makes it possible for unauthenticated attackers to make web requests to
- 7.5 High severity
Fluent Support – Helpdesk & Customer Support…: Exposure of Sensitive Information to an Unauthorized Actor
The Fluent Support – Helpdesk & Customer Support Ticket System plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 1.8.5 via the 'fluent-support' directory. This makes it possible for unauthenticated attac
- 9.8 Critical severity
FluentSMTP – WP SMTP Plugin with Amazon SES…: Deserialization of Untrusted Data
The FluentSMTP – WP SMTP Plugin with Amazon SES, SendGrid, MailGun, Postmark, Google and Any SMTP Provider plugin for WordPress is vulnerable to PHP Object Injection in all versions up to, and including, 2.2.82 via deserialization of untrusted input in the 'fo
- 8.8 High severity
Fluent Forms – Customizable Contact Forms…: Deserialization of Untrusted Data
The Contact Form Plugin by Fluent Forms for Quiz, Survey, and Drag & Drop WP Form Builder plugin for WordPress is vulnerable to PHP Object Injection in all versions up to, and including, 5.1.15 via deserialization of untrusted input in the extractDynamicValues
- 7.5 High severity
Fluent Forms – Customizable Contact Forms…: Missing Authorization
The Contact Form Plugin by Fluent Forms for Quiz, Survey, and Drag & Drop WP Form Builder plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the /wp-json/fluentform/v1/global-settings REST API endpoint
- 9.8 Critical severity
Fluent Forms – Customizable Contact Forms…: Missing Authorization
The Contact Form Plugin by Fluent Forms for Quiz, Survey, and Drag & Drop WP Form Builder plugin for WordPress is vulnerable to privilege escalation due to a missing capability check on the /wp-json/fluentform/v1/managers REST API endpoint in all versions up t