FF
Product
Fluent Forms Pro Add On Pack
5
CVEs
0
On KEV
8.8
Max CVSS
0
New 30D
Severity mix
Critical 0High 3Medium 2Low 0
Watch
Add Fluent Forms Pro Add On Pack to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-15962 | 8.8 | Jul 26 | Fluent Forms Pro Add On Pack <= 6.2.6 - Authenticated (Subscriber+) PHP Object Injection to Arbitrary User Password Change via User Meta Field Affected: through 6.2.6 |
| CVE-2026-2428 | 7.5 | Feb 27 | Fluent Forms Pro Add On Pack <= 6.1.17 - Missing Authorization to Unauthenticated Payment Status modification Affected: through 6.1.17 |
| CVE-2026-2365 | 7.2 | Mar 5 | Fluent Forms Pro <= 6.1.17 - Unauthenticated Stored Cross-Site Scripting via Draft Form Submission Affected: through 6.1.17 |
| CVE-2026-2899 | 6.5 | Mar 5 | Fluent Forms Pro Add On Pack <= 6.1.17 - Missing Authorization to Unauthenticated Arbitrary Attachment Deletion Affected: through 6.1.17 |
| CVE-2026-0632 | 5.4 | Feb 9 | Fluent Forms Pro Add On Pack <= 6.1.12 - Authenticated (Subscriber+) Server-Side Request Forgery via 'saveDataSource' Affected: through 6.1.12 |
Showing 5