Fluent Forms – Customizable Contact Forms, Survey, Quiz, & Conversational Form Builder vulnerabilities

Product

Fluent Forms – Customizable Contact Forms, Survey, Quiz, & Conversational Form Builder

by wpmanageninja · last CVE Oct 10, 2026

CVEs

On KEV

7.2

Max CVSS

New 30D

Vulnerabilities7 In the news0 Timeline

Severity mix

Critical 0High 2Medium 5Low 0

Severity

All severities7 Critical0 High2 Medium5 Low0

Exploitation

On CISA KEV0 Exploited in the wild0

Watch

Add Fluent Forms – Customizable Contact Forms, Survey, Quiz, & Conversational Form Builder to your stack to get only the CVEs that touch what you run.

CVE	CVSS	EPSS	Published	Summary · affected versions
CVE-2026-18146	7.2	0%	Aug 13	Fluent Forms <= 6.2.11 - Unauthenticated Stored Cross-Site Scripting via Notification Smartcode Values Affected: through 6.2.11
CVE-2026-16655	7.2	1%	Jul 29	Fluent Forms <= 6.2.7 - Unauthenticated Stored Cross-Site Scripting via Name Field Nested `password` Member Affected: through 6.2.7