CVE-2026-111831
MediumCVSS 5.3Summary
The FluentForm plugin up to version 6.2.15 contains a missing authorization vulnerability that allows exploitation of incorrectly configured access control security levels. An unauthorized user may access functions requiring privileges.
Risk Assessment
This could lead to unauthorized access to forms or data, compromising confidentiality and integrity.
Recommendation
Update the FluentForm plugin to a version later than 6.2.15 and review access control configuration.
Other vulnerabilities in FluentForm
See all- CVE-2026-103343Medium
FluentForm plugin has a stored XSS vulnerability due to improper input neutralization during web page generation. Affects versions up to 6.2.14.
- CVE-2026-103353Medium
A vulnerability in FluentForm (WordPress plugin) up to version 6.2.14 inclusive causes incorrect behavior order, allowing removal of important client functionality. The issue affects versions from n/a through 6.2.14.
Original NVD description (English source)
Missing Authorization vulnerability in WP ManageNinja LLC FluentForm fluentform allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects FluentForm: from n/a through 6.2.15.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS