Live Vulnerability Intelligence
Threat Database
Search CVEs, inspect descriptions, and open detail pages with AI-assisted technical context.
Threat Entry
Updated 2026-10-06
Fluentformpro - Security Vulnerability (CVE-2026-94675)
Unauthenticated Cross Site Scripting (XSS) in Fluent Forms Pro Add On Pack
PLUGIN
Fluentformpro
CVE-2026-94675
Risk Score
Threat Entry
Updated 2026-10-06
Fluentformpro - Security Vulnerability (CVE-2026-94669)
Missing Authorization vulnerability in WP ManageNinja LLC Fluent Forms Pro Add On Pack fluentformpro allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Fluent Forms Pro Add On Pack: from n/a through 6.2.13.
PLUGIN
Fluentformpro
CVE-2026-94669
Risk Score
Threat Entry
Updated 2026-08-20
Fluentformpro - Cross-Site Scripting (XSS) (CVE-2026-66633)
Unauthenticated Cross Site Scripting (XSS) in Fluent Forms Pro Add On Pack < 6.2.12 versions.
PLUGIN
Fluentformpro
CVE-2026-66633
Risk Score
Threat Entry
Updated 2026-09-09
Fluentformpro - Security Vulnerability (CVE-2026-73532)
Fluent Forms Pro 6.2.7 contains an embedded malicious code vulnerability introduced via a tampered plugin build served through a decommissioned update server. The tampered build introduced a rogue PHP file (libs/class-license-sync.php), loaded via a require_once directive added to fluentformpro.php, that established a backdoor REST API endpoint, dropped persistent PHP files in mu-plugins and uploads directories, installed a passwordless administrator account, and registered scheduled tasks that survived plugin removal.
PLUGIN
Fluentformpro
CVE-2026-73532
Risk Score