Vendor
Techjewel
44 known vulnerabilities in products by Techjewel, 0 of them actively exploited (CISA KEV).
Key figures
44
Vulnerabilities
0
Actively exploited (KEV)
0
Used by ransomware
2
Critical
Vulnerabilities
Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.
| Critical | CVE-2024-2771 | Fluentforms Contact Form: Missing Authorization | 9.8 | |
| Critical | CVE-2024-9511 | Deserialization of Untrusted Data (CVE-2024-9511) | 9.8 | |
| High | CVE-2026-15962 | Techjewel Fluent Forms Pro Add On Pack: Deserialization of Untrusted Data | 8.8 | |
| High | CVE-2024-2782 | Fluentforms Contact Form: Missing Authorization | 7.5 | |
| Medium | CVE-2026-7798 | FluentCRM <= 2.9.87 - Unauthenticated Blind Server-Side Request Forgery via 'SubscribeURL' Parameter | 5.4 | |
| High | CVE-2024-4157 | Fluentforms Contact Form: Deserialization of Untrusted Data | 7.5 | |
| Medium | CVE-2025-9260 | Deserialization of Untrusted Data (CVE-2025-9260) | 6.5 | |
| Medium | CVE-2023-1430 | WPManageNinja Fluentcrm: Use of a One-Way Hash without a Salt | 6.5 | |
| High | CVE-2026-5395 | Fluent Forms <= 6.2.0 - Authenticated (Subscriber+) Authorization Bypass via 'table' Parameter | 8.2 | |
| High | CVE-2026-5396 | Fluent Forms <= 6.1.21 - Authenticated (Subscriber+) Authorization Bypass via 'form_id' Parameter | 8.2 | |
| Medium | CVE-2026-6344 | Path Traversal (CVE-2026-6344) | 4.9 | |
| High | CVE-2023-3087 | FluentSMTP <= 2.2.4 - Unauthenticated Stored Cross-Site Scripting via Email Subject | 7.2 | |
| High | CVE-2024-13568 | Techjewel Fluent Support: Exposure of Sensitive Information to an Unauthorized Actor | 7.5 | |
| High | CVE-2026-2231 | Fluent Booking <= 2.0.01 - Unauthenticated Stored Cross-Site Scripting via Multiple Parameters | 7.2 | |
| High | CVE-2026-2365 | Fluent Forms Pro <= 6.1.17 - Unauthenticated Stored Cross-Site Scripting via Draft Form Submission | 7.2 | |
| Medium | CVE-2025-2939 | Techjewel Ninja Tables: Deserialization of Untrusted Data | 5.6 | |
| High | CVE-2026-2428 | Techjewel Fluent Forms Pro Add On Pack: Insufficient Verification of Data Authenticity | 7.5 | |
| High | CVE-2025-2940 | Ninja Tables – Easy Data Table Builder <= 5.0.18 - Unauthenticated Server-Side Request Forgery | 7.2 | |
| Medium | CVE-2026-8977 | Techjewel WP GDPR Cookie Consent: Cross-site Scripting | 6.4 | |
| Medium | CVE-2026-0996 | Cross-site Scripting (CVE-2026-0996) | 6.4 | |
| High | CVE-2024-10646 | Fluentforms Contact Form: Cross-site Scripting | 7.2 | |
| Medium | CVE-2026-6828 | Cross-site Scripting (CVE-2026-6828) | 6.4 | |
| Medium | CVE-2026-2899 | Techjewel Fluent Forms Pro Add On Pack: Missing Authorization | 6.5 | |
| Medium | CVE-2025-12935 | Cross-site Scripting (CVE-2025-12935) | 6.4 | |
| Medium | CVE-2026-4160 | Authorization Bypass Through User-Controlled Key (CVE-2026-4160) | 5.3 |