Contact Form
Fluentforms · 19 CVEs
Contact Form Plugin by Fluent Forms for Quiz, Survey, and Drag & Drop WP Form Builder <= 5.2.6 - Unauthenticated Stored…
Dec 14, 2024
Contact Form Plugin by Fluent Forms < 5.2.1 - Admin+ Stored XSS
Dec 9, 2024
Contact Form Plugin by Fluent Forms for Quiz, Survey, and Drag & Drop WP Form Builder <= 5.1.19 - Authenticated (Form M…
Oct 5, 2024
Contact Form Plugin by Fluent Forms for Quiz, Survey, and Drag & Drop WP Form Builder <= 5.1.18 - Missing Authorizatio…
Sep 1, 2024
Contact Form Plugin by Fluent Forms for Quiz, Survey, and Drag & Drop WP Form Builder <= 5.1.19 - Authenticated (Subscr…
Jul 27, 2024
Contact Form Plugin by Fluent Forms for Quiz, Survey, and Drag & Drop WP Form Builder <= 5.1.19 - Authenticated (Admini…
Jul 27, 2024
Contact Form Plugin by Fluent Forms for Quiz, Survey, and Drag & Drop WP Form Builder <= 5.1.19 - Authenticated (Admini…
Jul 27, 2024
Contact Form Plugin by Fluent Forms for Quiz, Survey, and Drag & Drop WP Form Builder <= 5.1.19 - Authenticated (Admini…
Jul 27, 2024
Contact Form Plugin by Fluent Forms for Quiz, Survey, and Drag & Drop WP Form Builder <= 5.1.15 - PHP Object Injection…
May 22, 2024
Contact Form Plugin by Fluent Forms for Quiz, Survey, and Drag & Drop WP Form Builder <= 5.1.16 - Authenticated (Contri…
May 18, 2024
Contact Form Plugin by Fluent Forms for Quiz, Survey, and Drag & Drop WP Form Builder <= 5.1.13 - Authenticated (Subscr…
May 18, 2024
Contact Form Plugin by Fluent Forms for Quiz, Survey, and Drag & Drop WP Form Builder <= 5.1.16 - Missing Authorization…
May 18, 2024
Contact Form Plugin by Fluent Forms for Quiz, Survey, and Drag & Drop WP Form Builder <= 5.1.16 - Missing Authorization…
May 18, 2024
Fluent Forms <= 5.1.9 - Authenticated (Contributor+) Stored Cross-Site Scripting
Mar 13, 2024
Fluent Forms <= 5.1.5 - Authenticated(Administrator+) Stored Cross-Site Scripting via imported form title
Jan 27, 2024
WordPress FluentForm Plugin <= 4.3.25 is vulnerable to SQL Injection
Oct 31, 2023
FluentForms < 4.3.25 - Contributor+ Stored XSS via Custom HTML Form Field
Apr 10, 2023
FluentForm < 4.3.13 - CSV Injection
Nov 7, 2022
CSRF in WP Fluent Forms < 3.6.67 allows stored XSS and Privilege Escalation
Jul 7, 2021
| CVE ID | Description | Severity | EPSS | Published |
|---|---|---|---|---|
| CVE-2024-10646 | Contact Form Plugin by Fluent Forms for Quiz, Survey, and Drag & Drop WP Form Builder <= 5.2.6 - Unauthenticated Stored Cross-Site Scripting via Form Subject | HIGH | 0.36% | Dec 14, 2024 |
| CVE-2024-9651 | Contact Form Plugin by Fluent Forms < 5.2.1 - Admin+ Stored XSS | MEDIUM | 0.37% | Dec 9, 2024 |
| CVE-2024-9528 | Contact Form Plugin by Fluent Forms for Quiz, Survey, and Drag & Drop WP Form Builder <= 5.1.19 - Authenticated (Form Manager+) Stored Cross-Site Scripting | MEDIUM | 0.40% | Oct 5, 2024 |
| CVE-2024-5053 | Contact Form Plugin by Fluent Forms for Quiz, Survey, and Drag & Drop WP Form Builder <= 5.1.18 - Missing Authorization to Authenticated (Subscriber+) Mailchi… | MEDIUM | 0.40% | Sep 1, 2024 |
| CVE-2024-6703 | Contact Form Plugin by Fluent Forms for Quiz, Survey, and Drag & Drop WP Form Builder <= 5.1.19 - Authenticated (Subscriber+) Stored Cross-Site Scripting via W… | MEDIUM | 0.32% | Jul 27, 2024 |
| CVE-2024-6518 | Contact Form Plugin by Fluent Forms for Quiz, Survey, and Drag & Drop WP Form Builder <= 5.1.19 - Authenticated (Administrator+) Stored Cross-Site Scripting | MEDIUM | 0.32% | Jul 27, 2024 |
| CVE-2024-6520 | Contact Form Plugin by Fluent Forms for Quiz, Survey, and Drag & Drop WP Form Builder <= 5.1.19 - Authenticated (Administrator+) Stored Cross-Site Scripting | MEDIUM | 0.32% | Jul 27, 2024 |
| CVE-2024-6521 | Contact Form Plugin by Fluent Forms for Quiz, Survey, and Drag & Drop WP Form Builder <= 5.1.19 - Authenticated (Administrator+) Stored Cross-Site Scripting | MEDIUM | 0.32% | Jul 27, 2024 |
| CVE-2024-4157 | Contact Form Plugin by Fluent Forms for Quiz, Survey, and Drag & Drop WP Form Builder <= 5.1.15 - PHP Object Injection via extractDynamicValues | HIGH | 0.70% | May 22, 2024 |
| CVE-2024-4709 | Contact Form Plugin by Fluent Forms for Quiz, Survey, and Drag & Drop WP Form Builder <= 5.1.16 - Authenticated (Contributor+) Stored Cross-Site Scripting | MEDIUM | 0.39% | May 18, 2024 |
| CVE-2024-2772 | Contact Form Plugin by Fluent Forms for Quiz, Survey, and Drag & Drop WP Form Builder <= 5.1.13 - Authenticated (Subscriber+) Stored Cross-Site Scripting | MEDIUM | 0.26% | May 18, 2024 |
| CVE-2024-2782 | Contact Form Plugin by Fluent Forms for Quiz, Survey, and Drag & Drop WP Form Builder <= 5.1.16 - Missing Authorization to Setting Manipulation | HIGH | 1.23% | May 18, 2024 |
| CVE-2024-2771 | Contact Form Plugin by Fluent Forms for Quiz, Survey, and Drag & Drop WP Form Builder <= 5.1.16 - Missing Authorization to Settings Update and Limited Privileg… | CRITICAL | 2.33% | May 18, 2024 |
| CVE-2023-6957 | Fluent Forms <= 5.1.9 - Authenticated (Contributor+) Stored Cross-Site Scripting | MEDIUM | 0.38% | Mar 13, 2024 |
| CVE-2024-0618 | Fluent Forms <= 5.1.5 - Authenticated(Administrator+) Stored Cross-Site Scripting via imported form title | MEDIUM | 0.54% | Jan 27, 2024 |
| CVE-2023-24410 | WordPress FluentForm Plugin <= 4.3.25 is vulnerable to SQL Injection | CRITICAL | 0.74% | Oct 31, 2023 |
| CVE-2023-0546 | FluentForms < 4.3.25 - Contributor+ Stored XSS via Custom HTML Form Field | MEDIUM | 0.48% | Apr 10, 2023 |
| CVE-2022-3463 | FluentForm < 4.3.13 - CSV Injection | CRITICAL | 1.33% | Nov 7, 2022 |
| CVE-2021-34620 | CSRF in WP Fluent Forms < 3.6.67 allows stored XSS and Privilege Escalation | HIGH | 2.63% | Jul 7, 2021 |
Showing 1 to 19 of 19 CVEs