Fluent Forms Pro Add On Pack vulnerabilities

3 known vulnerabilities in Fluent Forms Pro Add On Pack from Techjewel. 3 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 8.8 High severity

  Fluent Forms Pro Add On Pack: Deserialization of Untrusted Data

  CVE-2026-15962Jul 26, 2026Techjewel

  The Fluent Forms Pro Add On Pack plugin for WordPress is vulnerable to PHP Object Injection in all versions up to, and including, 6.2.6 via deserialization of untrusted input. This makes it possible for authenticated attackers, with Subscriber-level access and

• 7.2 High severity

  Fluent Forms Pro Add On Pack: Improper Neutralization of Input During Web Page Generation

  CVE-2026-2365Mar 5, 2026Techjewel

  The Fluent Forms Pro plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the `fluentform_step_form_save_data` AJAX action in all versions up to, and including, 6.1.17. This is due to the draft form submission endpoint being publicly accessibl

• 7.5 High severity

  Fluent Forms Pro Add On Pack: Insufficient Verification of Data Authenticity

  CVE-2026-2428Feb 27, 2026Techjewel

  The Fluent Forms Pro Add On Pack plugin for WordPress is vulnerable to Insufficient Verification of Data Authenticity in all versions up to, and including, 6.1.17. This is due to the PayPal IPN (Instant Payment Notification) verification being disabled by defa