FluentCRM Pro vulnerabilities
4 known CVE vulnerabilities in FluentCRM Pro, translated and rated.
- CVE-2026-78277Medium
SSRF vulnerability in FluentCRM Pro versions up to 3.1.12, affecting subscriber role users. Allows sending requests from the server to internal resources.
- CVE-2026-78270High
SQL injection vulnerability in FluentCRM Pro versions up to 3.1.12. An attacker can exploit it to manipulate database queries.
- CVE-2026-78271High
Editor Privilege Escalation vulnerability in FluentCRM Pro versions up to 3.1.12. A user with editor role can escalate their privileges to administrator level.
- CVE-2026-78468Medium
FluentCRM Pro plugin for WordPress up to version 3.1.12 is vulnerable to SQL Injection due to insufficient escaping and lack of query preparation. Authenticated attackers with Author-level access or above can append additional SQL queries to extract sensitive information from the database.