Vendor

    Contact Form - WPManageNinja

    19 known vulnerabilities in products by Contact Form - WPManageNinja, 0 of them actively exploited (CISA KEV).

    Key figures

    19

    Vulnerabilities

    0

    Actively exploited (KEV)

    0

    Used by ransomware

    3

    Critical

    Vulnerabilities

    Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.

    Vulnerabilities in Contact Form - WPManageNinja
    CriticalCVE-2024-2771

    Fluentforms Contact Form: Missing Authorization

    also in 1 other product

    		9.8
    HighCVE-2021-34620

    CSRF in WP Fluent Forms < 3.6.67 allows stored XSS and Privilege Escalation

    also in 1 other product

    		8.8
    CriticalCVE-2022-3463

    FluentForm < 4.3.13 - CSV Injection

    		9.8
    HighCVE-2024-2782

    Fluentforms Contact Form: Missing Authorization

    also in 1 other product

    		7.5
    HighCVE-2024-4157

    Fluentforms Contact Form: Deserialization of Untrusted Data

    also in 1 other product

    		7.5
    CriticalCVE-2023-24410

    WordPress FluentForm Plugin <= 4.3.25 is vulnerable to SQL Injection

    		5.5
    HighCVE-2024-10646

    Fluentforms Contact Form: Cross-site Scripting

    also in 1 other product

    		7.2
    MediumCVE-2024-4709

    Fluentforms Contact Form: Cross-site Scripting

    also in 1 other product

    		6.4
    MediumCVE-2024-9651

    Contact Form Plugin by Fluent Forms < 5.2.1 - Admin+ Stored XSS

    		6.1
    MediumCVE-2023-0546

    FluentForms < 4.3.25 - Contributor+ Stored XSS via Custom HTML Form Field

    		5.4
    MediumCVE-2024-0618

    Fluentforms Contact Form: Cross-site Scripting

    also in 1 other product

    		4.4
    MediumCVE-2024-9528

    Fluentforms Contact Form: Cross-site Scripting

    also in 1 other product

    		4.9
    MediumCVE-2024-2772

    Fluentforms Contact Form: Cross-site Scripting

    also in 1 other product

    		6.4
    MediumCVE-2023-6957

    Fluent Forms <= 5.1.9 - Authenticated (Contributor+) Stored Cross-Site Scripting

    also in 1 other product

    		4.9
    MediumCVE-2024-5053

    Fluentforms Contact Form: Improper Authorization

    also in 1 other product

    		4.2
    MediumCVE-2024-6703

    Fluentforms Contact Form: Cross-site Scripting

    also in 1 other product

    		4.9
    MediumCVE-2024-6521

    Fluentforms Contact Form: Cross-site Scripting

    also in 1 other product

    		4.4
    MediumCVE-2024-6518

    Fluentforms Contact Form: Cross-site Scripting

    also in 1 other product

    		4.4
    MediumCVE-2024-6520

    Fluentforms Contact Form: Cross-site Scripting

    also in 1 other product

    		4.4

    Products

    Products by Contact Form - WPManageNinja
    Fluent Forms190