Known vulnerabilities in the Fluentform plugin

20 security advisories have been published for the Fluentform plugin. Each entry below states what an attacker can do, what privilege they need, and the version the issue was fixed in.

Fluentform - Security Vulnerability (CVE-2026-73532) CRITICAL 2026-08-13
Fluentform - Cross-Site Scripting (XSS) (CVE-2026-18146) HIGH 2026-08-13
Fluentform - Cross-Site Scripting (XSS) (CVE-2026-17571) MEDIUM 2026-08-01
Fluentform - Security Vulnerability (CVE-2026-17567) MEDIUM 2026-07-31
Fluentform - Cross-Site Scripting (XSS) (CVE-2026-16655) HIGH 2026-07-29
Fluentform - Cross-Site Scripting (XSS) (CVE-2026-6828) MEDIUM 2026-05-13
Fluentform - Security Vulnerability (CVE-2026-6344) MEDIUM 2026-05-06
Fluentform - Cross-Site Scripting (XSS) (CVE-2026-2365) HIGH 2026-03-05
Fluentform - Broken Access Control (CVE-2026-0996) MEDIUM 2026-02-10
Fluentform - Remote Code Execution (CVE-2025-9260) MEDIUM 2025-09-03
Fluentform - Cross-Site Scripting (XSS) (CVE-2025-3615) MEDIUM 2025-04-17
Fluentform - Cross-Site Scripting (XSS) (CVE-2024-10646) HIGH 2024-12-14
Fluentform - Cross-Site Scripting (XSS) (CVE-2024-9528) MEDIUM 2024-10-05
Fluentform - Security Vulnerability (CVE-2024-5053) MEDIUM 2024-09-01
Fluentform - Cross-Site Scripting (XSS) (CVE-2024-6703) MEDIUM 2024-07-27
Fluentform - Cross-Site Scripting (XSS) (CVE-2024-6521) MEDIUM 2024-07-27
Fluentform - Cross-Site Scripting (XSS) (CVE-2024-6520) MEDIUM 2024-07-27
Fluentform - Cross-Site Scripting (XSS) (CVE-2024-6518) MEDIUM 2024-07-27
Fluentform - Cross-Site Scripting (XSS) (CVE-2024-4709) HIGH 2024-05-18
Fluentform - Privilege Escalation (CVE-2021-34620) HIGH 2021-07-07

Browse the full threat database

WordPress security that blocks attacks before they land.

sales@hackhalt.com

© Hack Halt Inc. All rights reserved.