Fluent Forms – Customizable Contact Forms, Survey, Quiz, & Conversational Form Builder
Approved changes feed: RSS · Atom
cpe:2.3:a:wpmanageninja:fluent_forms_–_customizable_contact_forms,_survey,_quiz,_&_conversational_form_builder:*:*:*:*:*:*:*:*
part: a version: * update: *
| Vendor | Wpmanageninja (5cded9dc-417a-5fad-ad09-b49995903cbc) |
|---|---|
| Product | Fluent Forms – Customizable Contact Forms, Survey, Quiz, & Conversational Form Builder (7b735baa-6908-5ae2-b763-e49d4925239f) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2026-5069 |
vulnerable | 2026-07-29 01:03:18.185561 |
Fluent Forms <= 6.2.1 - Incorrect Authorization to Authenticated (Subscriber+) Arbitrary Subscription Cancellation via 'subscription_id'
MEDIUM (5.4)
The Fluent Forms plugin for WordPress is vulnerable to incorrect authorization via the 'subscription_id' parameter in versions up to, and including, 6.2.1. This is due to insufficient ownership authorization checks in the payment cancellation AJAX flow. This makes it possible for authenticated attackers, with subscriber-level access and above, to submit cancellation requests for other users' subscriptions.
Published: 2026-07-10T02:30:39.977Z
Updated: 2026-07-10T18:02:38.866Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.