TE
Vendor
techjewel
41
CVEs
0
On KEV
0
New 30D
Products
FF9.8
Fluent Forms – Customizable Contact Forms, Survey, Quiz, & Conversational Form Builder
techjewel
24 CVEs0 on KEV0 new
FF8.8
Fluent Forms Pro Add On Pack
techjewel
5 CVEs0 on KEV0 new
NT7.2
Ninja Tables – Easy Data Table Builder
techjewel
4 CVEs0 on KEV0 new
FB7.2
Fluent Booking – The Ultimate Appointments Scheduling, Events Booking, Events Calendar Solution
techjewel
2 CVEs0 on KEV0 new
FE6.4
FluentCRM – Email Newsletter, Automation, Email Marketing, Email Campaigns, Optins, Leads, and CRM Solution
techjewel
2 CVEs0 on KEV0 new
FS7.5
Fluent Support – Helpdesk & Customer Support Ticket System
techjewel
1 CVEs0 on KEV0 new
FT6.4
FluentAuth – The Ultimate Authorization & Security Plugin for WordPress
techjewel
1 CVEs0 on KEV0 new
FW9.8
FluentSMTP – WP SMTP Plugin with Amazon SES, SendGrid, MailGun, Postmark, Google and Any SMTP Provider
techjewel
1 CVEs0 on KEV0 new
WG6.4
WP GDPR Cookie Consent
techjewel
1 CVEs0 on KEV0 new
Recent CVEs
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2026-15962 | FF Fluent Forms Pro Add On Pack techjewel | 8.8 | Jul 26 | Fluent Forms Pro Add On Pack <= 6.2.6 - Authenticated (Subscriber+) PHP Object Injection to Arbitrary User Password Change via User Meta Field |
| CVE-2026-8977 | WG WP GDPR Cookie Consent techjewel | 6.4 | Jun 9 | WP GDPR Cookie Consent <= 1.0.0 - Authenticated (Subscriber+) Stored Cross-Site Scripting via 'ninja_gdpr_ajax_actions' AJAX Action |
| CVE-2026-7798 | FE FluentCRM – Email Newsletter, Automation, Email Marketing, Email Campaigns, Optins, Leads, and CRM Solution techjewel | 5.4 | May 22 | FluentCRM <= 2.9.87 - Unauthenticated Blind Server-Side Request Forgery via 'SubscribeURL' Parameter |
| CVE-2026-5395 | FF Fluent Forms – Customizable Contact Forms, Survey, Quiz, & Conversational Form Builder techjewel | 8.2 | May 14 | Fluent Forms <= 6.2.0 - Authenticated (Subscriber+) Authorization Bypass via 'table' Parameter |
| CVE-2026-5396 | FF Fluent Forms – Customizable Contact Forms, Survey, Quiz, & Conversational Form Builder techjewel | 8.2 | May 14 | Fluent Forms <= 6.1.21 - Authenticated (Subscriber+) Authorization Bypass via 'form_id' Parameter |
| CVE-2026-6828 | FF Fluent Forms – Customizable Contact Forms, Survey, Quiz, & Conversational Form Builder techjewel | 6.4 | May 13 | Fluent Forms <= 6.2.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'permission_message' Shortcode Attribute |
| CVE-2026-6344 | FF Fluent Forms – Customizable Contact Forms, Survey, Quiz, & Conversational Form Builder techjewel | 4.9 | May 6 | Fluent Forms <= 6.2.1 - Authenticated (Administrator+) Arbitrary File Read via Path Traversal in Email Attachment |
| CVE-2026-2306 | NT Ninja Tables – Easy Data Table Builder techjewel | 4.3 | May 6 | Ninja Tables <= 5.2.6 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Table Creation |
| CVE-2026-4160 | FF Fluent Forms – Customizable Contact Forms, Survey, Quiz, & Conversational Form Builder techjewel | 5.3 | Apr 16 | Fluent Forms – Customizable Contact Forms, Survey, Quiz, & Conversational Form Builder <= 6.1.21 - Insecure Direct Object Reference in Stripe SCA Confirmation to Unauthenticated Payment Status Modification |
| CVE-2026-2231 | FB Fluent Booking – The Ultimate Appointments Scheduling, Events Booking, Events Calendar Solution techjewel | 7.2 | Mar 26 | Fluent Booking <= 2.0.01 - Unauthenticated Stored Cross-Site Scripting via Multiple Parameters |
| CVE-2026-2899 | FF Fluent Forms Pro Add On Pack techjewel | 6.5 | Mar 5 | Fluent Forms Pro Add On Pack <= 6.1.17 - Missing Authorization to Unauthenticated Arbitrary Attachment Deletion |
| CVE-2026-2365 | FF Fluent Forms Pro Add On Pack techjewel | 7.2 | Mar 5 | Fluent Forms Pro <= 6.1.17 - Unauthenticated Stored Cross-Site Scripting via Draft Form Submission |
| CVE-2026-2428 | FF Fluent Forms Pro Add On Pack techjewel | 7.5 | Feb 27 | Fluent Forms Pro Add On Pack <= 6.1.17 - Missing Authorization to Unauthenticated Payment Status modification |
| CVE-2026-0996 | FF Fluent Forms – Customizable Contact Forms, Survey, Quiz, & Conversational Form Builder techjewel | 6.4 | Feb 10 | Fluent Forms <= 6.1.14 - Authenticated (Subscriber+) Stored Cross-Site Scripting via AI Form Builder Module |
| CVE-2026-0632 | FF Fluent Forms Pro Add On Pack techjewel | 5.4 | Feb 9 | Fluent Forms Pro Add On Pack <= 6.1.12 - Authenticated (Subscriber+) Server-Side Request Forgery via 'saveDataSource' |
| CVE-2025-13722 | FF Fluent Forms – Customizable Contact Forms, Survey, Quiz, & Conversational Form Builder techjewel | 5.3 | Jan 7 | Fluent Forms <= 6.1.7 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Form Creation via AI Builder |
| CVE-2025-13728 | FT FluentAuth – The Ultimate Authorization & Security Plugin for WordPress techjewel | 6.4 | Dec 15 | FluentAuth - Auth Security Plugin <= 2.0.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'fluent_auth_reset_password' Shortcode |
| CVE-2025-13748 | FF Fluent Forms – Customizable Contact Forms, Survey, Quiz, & Conversational Form Builder techjewel | 5.3 | Dec 6 | Fluent Forms <= 6.1.7 - Unauthenticated Insecure Direct Object Reference to Payment Status Tampering via submission_id |
| CVE-2025-13756 | FB Fluent Booking – The Ultimate Appointments Scheduling, Events Booking, Events Calendar Solution techjewel | 4.3 | Dec 3 | Fluent Booking – The Ultimate Appointments Scheduling, Events Booking, Events Calendar Solution <= 1.9.11 - Authenticated (Subscriber+) Missing Authorization to Calendar Import and Management |
| CVE-2025-12935 | FE FluentCRM – Email Newsletter, Automation, Email Marketing, Email Campaigns, Optins, Leads, and CRM Solution techjewel | 6.4 | Nov 21 | FluentCRM - Marketing Automation For WordPress <= 2.9.84 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'fluentcrm_content' Shortcode |
| CVE-2025-9260 | FF Fluent Forms – Customizable Contact Forms, Survey, Quiz, & Conversational Form Builder techjewel | 6.5 | Sep 2 | Fluent Forms – Customizable Contact Forms, Survey, Quiz, & Conversational Form Builder 5.1.16 - 6.1.1 - Authenticated (Subscriber+) PHP Object Injection To Arbitrary File Read |
| CVE-2025-2940 | NT Ninja Tables – Easy Data Table Builder techjewel | 7.2 | Jun 27 | Ninja Tables – Easy Data Table Builder <= 5.0.18 - Unauthenticated Server-Side Request Forgery |
| CVE-2025-2939 | NT Ninja Tables – Easy Data Table Builder techjewel | 5.6 | Jun 3 | Ninja Tables – Easy Data Table Builder <= 5.0.18 - Unauthenticated PHP Object Injection to Limited Remote Code Execution |
| CVE-2025-3615 | FF Fluent Forms – Customizable Contact Forms, Survey, Quiz, & Conversational Form Builder techjewel | 6.4 | Apr 17 | Fluent Forms <= 6.0.2 - Authenticated (Contributor+) Stored Cross-Site Scripting |
| CVE-2024-13666 | FF Fluent Forms – Customizable Contact Forms, Survey, Quiz, & Conversational Form Builder techjewel | 5.3 | Mar 22 | Fluent Forms – Customizable Contact Forms, Survey, Quiz, & Conversational Form Builder <= 5.2.12 - IP-Spoofing |
| CVE-2024-13568 | FS Fluent Support – Helpdesk & Customer Support Ticket System techjewel | 7.5 | Mar 1 | Fluent Support – Helpdesk & Customer Support Ticket System <= 1.8.5 - Unauthenticated Sensitive Information Exposure Through Unprotected Directory |
| CVE-2024-10646 | FF Fluent Forms – Customizable Contact Forms, Survey, Quiz, & Conversational Form Builder techjewel | 6.1 | Dec 14 | Contact Form Plugin by Fluent Forms for Quiz, Survey, and Drag & Drop WP Form Builder <= 5.2.6 - Unauthenticated Stored Cross-Site Scripting via Form Subject |
| CVE-2024-9511 | FW FluentSMTP – WP SMTP Plugin with Amazon SES, SendGrid, MailGun, Postmark, Google and Any SMTP Provider techjewel | 9.8 | Nov 23 | FluentSMTP – WP SMTP Plugin with Amazon SES, SendGrid, MailGun, Postmark, Google and Any SMTP Provider <= 2.2.82 - Unauthenticated PHP Object Injection |
| CVE-2024-9528 | FF Fluent Forms – Customizable Contact Forms, Survey, Quiz, & Conversational Form Builder techjewel | 4.8 | Oct 5 | Contact Form Plugin by Fluent Forms for Quiz, Survey, and Drag & Drop WP Form Builder <= 5.1.19 - Authenticated (Form Manager+) Stored Cross-Site Scripting |
| CVE-2024-5053 | FF Fluent Forms – Customizable Contact Forms, Survey, Quiz, & Conversational Form Builder techjewel | 4.3 | Sep 1 | Contact Form Plugin by Fluent Forms for Quiz, Survey, and Drag & Drop WP Form Builder <= 5.1.18 - Missing Authorization to Authenticated (Subscriber+) Mailchimp Integration Modification |
| CVE-2024-7304 | NT Ninja Tables – Easy Data Table Builder techjewel | 5.4 | Aug 27 | Ninja Tables – Easiest Data Table Builder <= 5.0.12 - Authenticated (Author+) Stored Cross-Site Scripting via SVG File Upload |
| CVE-2024-6703 | FF Fluent Forms – Customizable Contact Forms, Survey, Quiz, & Conversational Form Builder techjewel | 5.4 | Jul 27 | Contact Form Plugin by Fluent Forms for Quiz, Survey, and Drag & Drop WP Form Builder <= 5.1.19 - Authenticated (Subscriber+) Stored Cross-Site Scripting via Welcome Screen Fields |
| CVE-2024-6518 | FF Fluent Forms – Customizable Contact Forms, Survey, Quiz, & Conversational Form Builder techjewel | 4.4 | Jul 27 | Contact Form Plugin by Fluent Forms for Quiz, Survey, and Drag & Drop WP Form Builder <= 5.1.19 - Authenticated (Administrator+) Stored Cross-Site Scripting |
| CVE-2024-6520 | FF Fluent Forms – Customizable Contact Forms, Survey, Quiz, & Conversational Form Builder techjewel | 4.4 | Jul 27 | Contact Form Plugin by Fluent Forms for Quiz, Survey, and Drag & Drop WP Form Builder <= 5.1.19 - Authenticated (Administrator+) Stored Cross-Site Scripting |
| CVE-2024-6521 | FF Fluent Forms – Customizable Contact Forms, Survey, Quiz, & Conversational Form Builder techjewel | 4.4 | Jul 27 | Contact Form Plugin by Fluent Forms for Quiz, Survey, and Drag & Drop WP Form Builder <= 5.1.19 - Authenticated (Administrator+) Stored Cross-Site Scripting |
| CVE-2024-4157 | FF Fluent Forms – Customizable Contact Forms, Survey, Quiz, & Conversational Form Builder techjewel | 8.8 | May 22 | Contact Form Plugin by Fluent Forms for Quiz, Survey, and Drag & Drop WP Form Builder <= 5.1.15 - PHP Object Injection via extractDynamicValues |
| CVE-2024-4709 | FF Fluent Forms – Customizable Contact Forms, Survey, Quiz, & Conversational Form Builder techjewel | 6.4 | May 18 | Contact Form Plugin by Fluent Forms for Quiz, Survey, and Drag & Drop WP Form Builder <= 5.1.16 - Authenticated (Contributor+) Stored Cross-Site Scripting |
| CVE-2024-2772 | FF Fluent Forms – Customizable Contact Forms, Survey, Quiz, & Conversational Form Builder techjewel | 5.4 | May 18 | Contact Form Plugin by Fluent Forms for Quiz, Survey, and Drag & Drop WP Form Builder <= 5.1.13 - Authenticated (Subscriber+) Stored Cross-Site Scripting |
| CVE-2024-2782 | FF Fluent Forms – Customizable Contact Forms, Survey, Quiz, & Conversational Form Builder techjewel | 7.5 | May 18 | Contact Form Plugin by Fluent Forms for Quiz, Survey, and Drag & Drop WP Form Builder <= 5.1.16 - Missing Authorization to Setting Manipulation |
| CVE-2024-2771 | FF Fluent Forms – Customizable Contact Forms, Survey, Quiz, & Conversational Form Builder techjewel | 9.8 | May 18 | Contact Form Plugin by Fluent Forms for Quiz, Survey, and Drag & Drop WP Form Builder <= 5.1.16 - Missing Authorization to Settings Update and Limited Privilege Escalation |
| CVE-2023-6957 | FF Fluent Forms – Customizable Contact Forms, Survey, Quiz, & Conversational Form Builder techjewel | 5.4 | Mar 13 | Fluent Forms <= 5.1.9 - Authenticated (Contributor+) Stored Cross-Site Scripting |
