VendorsFluent Formscontact_formall versions
Vulnerabilities

Fluent Forms Contact Form

Ranked by severity, then by exploit likelihood. Click a CVE ID for its full record.

19CVEs
CVE-2024-2771
Contact Form Plugin by Fluent Forms for Quiz, Survey, and Drag & Drop WP Form Builder <= 5.1.16 - Missing Authorization to Settings Update and Limited Privilege Escalation
Published 2024-05-18 · Modified
9.8EPSS 0.023
CVE-2022-3463
FluentForm < 4.3.13 - CSV Injection
Published 2022-11-07 · Modified
9.8EPSS 0.013
CVE-2023-24410
WordPress FluentForm Plugin <= 4.3.25 is vulnerable to SQL Injection
Published 2023-10-31 · Modified
9.8EPSS 0.007
CVE-2021-34620
CSRF in WP Fluent Forms < 3.6.67 allows stored XSS and Privilege Escalation
Published 2021-07-07 · Modified
8.8EPSS 0.026
CVE-2024-4157
Contact Form Plugin by Fluent Forms for Quiz, Survey, and Drag & Drop WP Form Builder <= 5.1.15 - PHP Object Injection via extractDynamicValues
Published 2024-05-22 · Modified
8.8EPSS 0.007
CVE-2024-2782
Contact Form Plugin by Fluent Forms for Quiz, Survey, and Drag & Drop WP Form Builder <= 5.1.16 - Missing Authorization to Setting Manipulation
Published 2024-05-18 · Modified
7.5EPSS 0.012
CVE-2024-10646
Contact Form Plugin by Fluent Forms for Quiz, Survey, and Drag & Drop WP Form Builder <= 5.2.6 - Unauthenticated Stored Cross-Site Scripting via Form Subject
Published 2024-12-14 · Analyzed
7.2EPSS 0.004
CVE-2024-4709
Contact Form Plugin by Fluent Forms for Quiz, Survey, and Drag & Drop WP Form Builder <= 5.1.16 - Authenticated (Contributor+) Stored Cross-Site Scripting
Published 2024-05-18 · Modified
6.4EPSS 0.004
CVE-2024-2772
Contact Form Plugin by Fluent Forms for Quiz, Survey, and Drag & Drop WP Form Builder <= 5.1.13 - Authenticated (Subscriber+) Stored Cross-Site Scripting
Published 2024-05-18 · Modified
6.4EPSS 0.003
CVE-2024-9651
Contact Form Plugin by Fluent Forms < 5.2.1 - Admin+ Stored XSS
Published 2024-12-09 · Analyzed
6.1EPSS 0.004
CVE-2023-0546
FluentForms < 4.3.25 - Contributor+ Stored XSS via Custom HTML Form Field
Published 2023-04-10 · Modified
5.4EPSS 0.005
CVE-2023-6957
Fluent Forms <= 5.1.9 - Authenticated (Contributor+) Stored Cross-Site Scripting
Published 2024-03-13 · Modified
5.4EPSS 0.004
CVE-2024-6703
Contact Form Plugin by Fluent Forms for Quiz, Survey, and Drag & Drop WP Form Builder <= 5.1.19 - Authenticated (Subscriber+) Stored Cross-Site Scripting via Welcome Screen Fields
Published 2024-07-27 · Analyzed
5.4EPSS 0.003
CVE-2024-9528
Contact Form Plugin by Fluent Forms for Quiz, Survey, and Drag & Drop WP Form Builder <= 5.1.19 - Authenticated (Form Manager+) Stored Cross-Site Scripting
Published 2024-10-05 · Analyzed
4.9EPSS 0.004
CVE-2024-0618
Fluent Forms <= 5.1.5 - Authenticated(Administrator+) Stored Cross-Site Scripting via imported form title
Published 2024-01-27 · Modified
4.8EPSS 0.005
CVE-2024-6518
Contact Form Plugin by Fluent Forms for Quiz, Survey, and Drag & Drop WP Form Builder <= 5.1.19 - Authenticated (Administrator+) Stored Cross-Site Scripting
Published 2024-07-27 · Modified
4.8EPSS 0.003
CVE-2024-6520
Contact Form Plugin by Fluent Forms for Quiz, Survey, and Drag & Drop WP Form Builder <= 5.1.19 - Authenticated (Administrator+) Stored Cross-Site Scripting
Published 2024-07-27 · Modified
4.8EPSS 0.003
CVE-2024-6521
Contact Form Plugin by Fluent Forms for Quiz, Survey, and Drag & Drop WP Form Builder <= 5.1.19 - Authenticated (Administrator+) Stored Cross-Site Scripting
Published 2024-07-27 · Modified
4.8EPSS 0.003
CVE-2024-5053
Contact Form Plugin by Fluent Forms for Quiz, Survey, and Drag & Drop WP Form Builder <= 5.1.18 - Missing Authorization to Authenticated (Subscriber+) Mailchimp Integration Modification
Published 2024-09-01 · Analyzed
4.3EPSS 0.004