FluentForm vulnerabilities

The FluentForm plugin up to version 6.2.15 contains a missing authorization vulnerability that allows exploitation of incorrectly configured access control security levels. An unauthorized user may access functions requiring privileges.

FluentForm plugin has a stored XSS vulnerability due to improper input neutralization during web page generation. Affects versions up to 6.2.14.

A vulnerability in FluentForm (WordPress plugin) up to version 6.2.14 inclusive causes incorrect behavior order, allowing removal of important client functionality. The issue affects versions from n/a through 6.2.14.