Fluentcrm

Submit a proposal Propose CVE/GCVE/GHSA reference

Approved changes feed: RSS · Atom

cpe:2.3:a:wpmanageninja:fluentcrm:*:*:*:*:*:wordpress:*:*

part: a version: * update: *

VendorWpmanageninja (5cded9dc-417a-5fad-ad09-b49995903cbc)
ProductFluentcrm (28ab6a65-c338-5c6d-97d7-ffeb6234a471)
Edition*
Language*
Software edition*
Target softwarewordpress
Target hardware*
Other*
NotesImported from purl2cpe mapping

PURL mappings

PURLSourceLast updated
pkg:github/fluentcrm/fluent-crm purl2cpe 2026-06-01 10:11:51.953652

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2024-30430 vulnerable 2026-06-08 06:35:30.341944 WordPress FluentCRM plugin <= 2.8.44 - Cross Site Scripting (XSS) vulnerability
MEDIUM (5.9)
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in WP Email Newsletter Team - FluentCRM Fluent CRM allows Stored XSS.This issue affects Fluent CRM: from n/a through 2.8.44.
Published: 2024-03-29T13:33:24.089Z
Updated: 2026-04-28T16:09:22.980Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-1430 vulnerable 2026-06-08 05:52:35.907274 FluentCRM - Marketing Automation For WordPress <= 2.8.01 - Insufficient Use of Hash as Authorization Control
MEDIUM (6.5)
The FluentCRM - Marketing Automation For WordPress plugin for WordPress is vulnerable to unauthorized modification of data in versions up to, and including, 2.8.01 due to the use of an MD5 hash without a salt to control subscriptions. This makes it possible for unauthenticated attackers to unsubscribe users from lists and manage subscriptions, granted they gain access to any targeted subscribers email address.
Published: 2023-06-09T05:33:37.287Z
Updated: 2026-04-08T17:28:18.137Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.