Known vulnerabilities in the Fluent Forms plugin

10 security advisories have been published for the Fluent Forms plugin. Each entry below states what an attacker can do, what privilege they need, and the version the issue was fixed in.

Fluent Forms - Cross-Site Scripting (XSS) (CVE-2026-11881) MEDIUM 2026-07-30
Fluent Forms - Broken Access Control (CVE-2026-5069) MEDIUM 2026-07-10
Fluent Forms - Security Vulnerability (CVE-2026-11578) LOW 2026-07-02
Fluent Forms - Security Vulnerability (CVE-2026-11880) LOW 2026-07-01
Fluent Forms - Broken Access Control (CVE-2026-5396) HIGH 2026-05-14
Fluent Forms - Security Vulnerability (CVE-2026-6344) MEDIUM 2026-05-06
Fluent Forms - Broken Access Control (CVE-2026-0996) MEDIUM 2026-02-10
Fluent Forms - Cross-Site Scripting (XSS) (CVE-2025-3615) MEDIUM 2025-04-17
Fluent Forms - Cross-Site Scripting (XSS) (CVE-2024-9651) MEDIUM 2024-12-09
Fluent Forms - Cross-Site Scripting (XSS) (CVE-2023-6957) MEDIUM 2024-03-13

Browse the full threat database

WordPress security that blocks attacks before they land.

sales@hackhalt.com

© Hack Halt Inc. All rights reserved.