WPManageNinja vulnerabilities

CVEs per yearBy the year they were published

1. 20241
2. 202624
3. 20262

Newest CVEs

• CVE-2026-120577

  FluentCart A New Era of eCommerce <= 1.6.2 - Authenticated (Custom+) Arbitrary File Deletion via 'file_path' Parameter

  wpmanageninja · FluentCart A New Era of eCommerce – Faster, Lighter, and Simpler

  High8.1
• CVE-2026-103525

  FluentCart A New Era of eCommerce <= 1.7.0 - Insecure Direct Object Reference to Unauthenticated Sensitive Information Disclosure via 'order_id' and 'billing_address_id' Parameters

  wpmanageninja · FluentCart A New Era of eCommerce – Faster, Lighter, and Simpler

  High7.5
• CVE-2026-103518

  FluentCart A New Era of eCommerce <= 1.7.0 - Authenticated (Administrator+) SQL Injection via 'products.variants' Array Keys

  wpmanageninja · FluentCart A New Era of eCommerce – Faster, Lighter, and Simpler

  Medium4.9
• CVE-2026-109695

  WordPress FluentCart plugin <= 1.7.1 - Sensitive Data Exposure vulnerability

  WPManageNinja · FluentCart

  High7.5
• CVE-2026-108484

  WordPress Best Payments Plugin for WP plugin <= 4.6.27 - Cross Site Scripting (XSS) vulnerability

  WPManageNinja · Best Payments Plugin for WP

  High7.1
• CVE-2026-15178

  Fluent Forms <= 6.2.5 - Missing Authorization to Authenticated (Custom+) Sensitive Data Exposure and Modification

  wpmanageninja · Fluent Forms – Customizable Contact Forms, Survey, Quiz, & Conversational Form Builder

  Medium5.4
• CVE-2026-101324

  Fluent Forms <= 6.2.14 - Reflected Cross-Site Scripting via '{get.*}' Editor SmartCode Parameter

  wpmanageninja · Fluent Forms – Customizable Contact Forms, Survey, Quiz, & Conversational Form Builder

  Medium4.7
• CVE-2026-94679

  WordPress Fluent Support plugin <= 2.3.2 - Broken Access Control vulnerability

  WPManageNinja · Fluent Support

  Medium5.4
• CVE-2026-66633

  WordPress Fluent Forms Pro Add On Pack plugin < 6.2.12 - Cross Site Scripting (XSS) vulnerability

  WPManageNinja · Fluent Forms Pro Add On Pack

  High7.1
• CVE-2026-73532

  Fluent Forms Pro 6.2.7 Embedded Malicious Code via Tampered Plugin Build

  WPManageNinja · Fluent Forms Pro

  Critical9.3