WordPress plugin
Fluent Forms Pro Add On Pack security & vulnerabilities
No known unpatched vulnerabilities in the latest version
All 11 known vulnerabilities are fixed in the latest release. If you run an older version, update to null or newer.
- Critical1
- High5
- Medium5
- Low0
All Fluent Forms Pro Add On Pack vulnerabilities
| Severity | Vulnerability | CVE | Published |
|---|---|---|---|
| High7.2 | Unauthenticated Stored Cross-Site Scripting ≤6.2.13Update to 6.2.14 | CVE-2026-94675 | |
| High7.2 | Unauthenticated Stored Cross-Site Scripting <6.2.12Update to 6.2.12 | CVE-2026-66633 | |
| Critical9.8 | Remote Code Execution via Backdoor 6.2.7 – 6.2.7Update to 6.2.8 | CVE-2026-73532 | |
| High8.8 | Authenticated (Subscriber+) PHP Object Injection to Arbitrary User Password Change via User Meta Field ≤6.2.6Update to 6.2.7 | CVE-2026-15962 | |
| High7.2 | Unauthenticated Stored Cross-Site Scripting via Draft Form Submission ≤6.1.17Update to 6.1.18 | CVE-2026-2365 | |
| High7.5 | Missing Authorization to Unauthenticated Payment Status modification ≤6.1.17Update to 6.1.18 | CVE-2026-2428 |
- High7.2Unauthenticated Stored Cross-Site Scripting
≤6.2.13Update to 6.2.14
- High7.2Unauthenticated Stored Cross-Site Scripting
<6.2.12Update to 6.2.12
- Critical9.8Remote Code Execution via Backdoor
6.2.7 – 6.2.7Update to 6.2.8
- High8.8Authenticated (Subscriber+) PHP Object Injection to Arbitrary User Password Change via User Meta Field
≤6.2.6Update to 6.2.7
- High7.2Unauthenticated Stored Cross-Site Scripting via Draft Form Submission
≤6.1.17Update to 6.1.18
- High7.5Missing Authorization to Unauthenticated Payment Status modification
≤6.1.17Update to 6.1.18
Fluent Forms Pro Add On Pack: common questions
Does Fluent Forms Pro Add On Pack have known vulnerabilities?
Yes. VulnCrest Radar lists 11 known vulnerabilities in Fluent Forms Pro Add On Pack: 1 critical, 5 high, 5 medium. None are known to affect version null.
How do I check which version of Fluent Forms Pro Add On Pack I run?
In wp-admin open Plugins → Installed Plugins; the version is shown under the name. Without admin access, our passive Check my site tool can often read it from public files.
What is the most recent Fluent Forms Pro Add On Pack vulnerability?
CVE-2026-94669, published Oct 5, 2026: Fluent Forms Pro Add On Pack <= 6.2.13 - Missing Authorization. Severity: Medium (CVSS 5.3).
Is any Fluent Forms Pro Add On Pack vulnerability listed in CISA KEV?
No. None of the known Fluent Forms Pro Add On Pack vulnerabilities is currently listed in the CISA KEV catalog.