Fluent Forms – Customizable Contact Forms, Survey, Quiz, & Conversational Form Builder vulnerabilities

Product

Fluent Forms – Customizable Contact Forms, Survey, Quiz, & Conversational Form Builder

by techjewel · last CVE May 14, 2026

CVEs

On KEV

9.8

Max CVSS

New 30D

Vulnerabilities25 In the news0 Timeline

Severity mix

Critical 1High 4Medium 20Low 0

Severity

All severities25 Critical1 High4 Medium20 Low0

Exploitation

On CISA KEV0 Exploited in the wild0

Watch

Add Fluent Forms – Customizable Contact Forms, Survey, Quiz, & Conversational Form Builder to your stack to get only the CVEs that touch what you run.

CVE	CVSS	EPSS	Published	Summary · affected versions
CVE-2024-4157	8.8	1%	May 22	Contact Form Plugin by Fluent Forms for Quiz, Survey, and Drag & Drop WP Form Builder <= 5.1.15 - PHP Object Injection via extractDynamicValues Affected: through 5.1.15
CVE-2026-5395	8.2	0%	May 14	Fluent Forms <= 6.2.0 - Authenticated (Subscriber+) Authorization Bypass via 'table' Parameter Affected: through 6.2.0
CVE-2026-5396	8.2	0%	May 14	Fluent Forms <= 6.1.21 - Authenticated (Subscriber+) Authorization Bypass via 'form_id' Parameter Affected: through 6.1.21
CVE-2024-2782	7.5	1%	May 18	Contact Form Plugin by Fluent Forms for Quiz, Survey, and Drag & Drop WP Form Builder <= 5.1.16 - Missing Authorization to Setting Manipulation Affected: through 5.1.16