CVE-2026-103353
MediumCVSS 5.3Summary
A vulnerability in FluentForm (WordPress plugin) up to version 6.2.14 inclusive causes incorrect behavior order, allowing removal of important client functionality. The issue affects versions from n/a through 6.2.14.
Risk Assessment
An attacker may disrupt form functionality, potentially leading to data loss or disruption of business processes relying on FluentForm.
Recommendation
It is recommended to update FluentForm to a version newer than 6.2.14 if a fix is available, or apply other mitigations provided by the vendor.
Other vulnerabilities in FluentForm
See all- CVE-2026-111831Medium
The FluentForm plugin up to version 6.2.15 contains a missing authorization vulnerability that allows exploitation of incorrectly configured access control security levels. An unauthorized user may access functions requiring privileges.
- CVE-2026-103343Medium
FluentForm plugin has a stored XSS vulnerability due to improper input neutralization during web page generation. Affects versions up to 6.2.14.
Original NVD description (English source)
Incorrect Behavior Order vulnerability in WP ManageNinja LLC FluentForm fluentform allows Removing Important Client Functionality.This issue affects FluentForm: from n/a through 6.2.14.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS