Product by Techjewel

    Fluent Forms – Customizable Contact Forms, Survey, Quiz, & Conversational Form Builder

    25 known vulnerabilities in Fluent Forms – Customizable Contact Forms, Survey, Quiz, & Conversational Form Builder (Techjewel), 0 of them actively exploited (CISA KEV).

    Key figures

    25

    Vulnerabilities

    0

    Actively exploited (KEV)

    0

    Used by ransomware

    1

    Critical

    Vulnerabilities

    Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.

    Vulnerabilities in Fluent Forms – Customizable Contact Forms, Survey, Quiz, & Conversational Form Builder (Techjewel)
    CriticalCVE-2024-2771

    Fluentforms Contact Form: Missing Authorization

    also in 1 other product

    		9.8
    HighCVE-2024-2782

    Fluentforms Contact Form: Missing Authorization

    also in 1 other product

    		7.5
    HighCVE-2024-4157

    Fluentforms Contact Form: Deserialization of Untrusted Data

    also in 1 other product

    		7.5
    MediumCVE-2025-9260

    Deserialization of Untrusted Data (CVE-2025-9260)

    		6.5
    HighCVE-2026-5395

    Fluent Forms <= 6.2.0 - Authenticated (Subscriber+) Authorization Bypass via 'table' Parameter

    		8.2
    HighCVE-2026-5396

    Fluent Forms <= 6.1.21 - Authenticated (Subscriber+) Authorization Bypass via 'form_id' Parameter

    		8.2
    MediumCVE-2026-6344

    Path Traversal (CVE-2026-6344)

    		4.9
    MediumCVE-2026-0996

    Cross-site Scripting (CVE-2026-0996)

    		6.4
    HighCVE-2024-10646

    Fluentforms Contact Form: Cross-site Scripting

    also in 1 other product

    		7.2
    MediumCVE-2026-6828

    Cross-site Scripting (CVE-2026-6828)

    		6.4
    MediumCVE-2026-4160

    Authorization Bypass Through User-Controlled Key (CVE-2026-4160)

    		5.3
    MediumCVE-2024-4709

    Fluentforms Contact Form: Cross-site Scripting

    also in 1 other product

    		6.4
    MediumCVE-2025-3615

    Fluent Forms <= 6.0.2 - Authenticated (Contributor+) Stored Cross-Site Scripting

    		6.4
    MediumCVE-2024-0618

    Fluentforms Contact Form: Cross-site Scripting

    also in 1 other product

    		4.4
    MediumCVE-2025-13748

    Authorization Bypass Through User-Controlled Key (CVE-2025-13748)

    		5.3
    MediumCVE-2025-13722

    Missing Authorization (CVE-2025-13722)

    		5.3
    MediumCVE-2024-9528

    Fluentforms Contact Form: Cross-site Scripting

    also in 1 other product

    		4.9
    MediumCVE-2024-2772

    Fluentforms Contact Form: Cross-site Scripting

    also in 1 other product

    		6.4
    MediumCVE-2024-13666

    Improper Input Validation (CVE-2024-13666)

    		5.3
    MediumCVE-2023-6957

    Fluent Forms <= 5.1.9 - Authenticated (Contributor+) Stored Cross-Site Scripting

    also in 1 other product

    		4.9
    MediumCVE-2024-5053

    Fluentforms Contact Form: Improper Authorization

    also in 1 other product

    		4.2
    MediumCVE-2024-6703

    Fluentforms Contact Form: Cross-site Scripting

    also in 1 other product

    		4.9
    MediumCVE-2024-6518

    Fluentforms Contact Form: Cross-site Scripting

    also in 1 other product

    		4.4
    MediumCVE-2024-6520

    Fluentforms Contact Form: Cross-site Scripting

    also in 1 other product

    		4.4
    MediumCVE-2024-6521

    Fluentforms Contact Form: Cross-site Scripting

    also in 1 other product

    		4.4

    All products by Techjewel