What’s Vulnerable › Products

techjewel Fluent Forms Pro Add On Pack vulnerabilities

5 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 5 published in the last 12 months.

Check whether your techjewel Fluent Forms Pro Add On Pack version is affected

Latest techjewel Fluent Forms Pro Add On Pack vulnerabilities

• CVE-2026-15962 — Fluent Forms Pro Add On Pack <= 6.2.6 - Authenticated (Subscriber+) PHP Object Injection to Arbitrary User Password Change via User Meta Field (CVSS 8.8)
• CVE-2026-2899 — Fluent Forms Pro Add On Pack <= 6.1.17 - Missing Authorization to Unauthenticated Arbitrary Attachment Deletion (CVSS 6.5)
• CVE-2026-2365 — Fluent Forms Pro <= 6.1.17 - Unauthenticated Stored Cross-Site Scripting via Draft Form Submission (CVSS 7.2)
• CVE-2026-2428 — Fluent Forms Pro Add On Pack <= 6.1.17 - Missing Authorization to Unauthenticated Payment Status modification (CVSS 7.5)
• CVE-2026-0632 — Fluent Forms Pro Add On Pack <= 6.1.12 - Authenticated (Subscriber+) Server-Side Request Forgery via 'saveDataSource' (CVSS 5.4)