techjewel vulnerabilities

CVEs per yearBy the year they were published

1. 20232
2. 202416
3. 202510
4. 202616

Newest CVEs

• CVE-2026-15962

  Fluent Forms Pro Add On Pack <= 6.2.6 - Authenticated (Subscriber+) PHP Object Injection to Arbitrary User Password Change via User Meta Field

  techjewel · Fluent Forms Pro Add On Pack

  High8.8
• CVE-2026-8977

  WP GDPR Cookie Consent <= 1.0.0 - Authenticated (Subscriber+) Stored Cross-Site Scripting via 'ninja_gdpr_ajax_actions' AJAX Action

  techjewel · WP GDPR Cookie Consent

  Medium6.4
• CVE-2026-7798

  FluentCRM <= 2.9.87 - Unauthenticated Blind Server-Side Request Forgery via 'SubscribeURL' Parameter

  techjewel · FluentCRM – Email Newsletter, Automation, Email Marketing, Email Campaigns, Optins, Leads, and CRM Solution

  Medium5.4
• CVE-2026-5395

  Fluent Forms <= 6.2.0 - Authenticated (Subscriber+) Authorization Bypass via 'table' Parameter

  techjewel · Fluent Forms – Customizable Contact Forms, Survey, Quiz, & Conversational Form Builder

  High8.2
• CVE-2026-5396

  Fluent Forms <= 6.1.21 - Authenticated (Subscriber+) Authorization Bypass via 'form_id' Parameter

  techjewel · Fluent Forms – Customizable Contact Forms, Survey, Quiz, & Conversational Form Builder

  High8.2
• CVE-2026-6828

  Fluent Forms <= 6.2.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'permission_message' Shortcode Attribute

  techjewel · Fluent Forms – Customizable Contact Forms, Survey, Quiz, & Conversational Form Builder

  Medium6.4
• CVE-2026-6344

  Fluent Forms <= 6.2.1 - Authenticated (Administrator+) Arbitrary File Read via Path Traversal in Email Attachment

  techjewel · Fluent Forms – Customizable Contact Forms, Survey, Quiz, & Conversational Form Builder

  Medium4.9
• CVE-2026-2306

  Ninja Tables <= 5.2.6 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Table Creation

  techjewel · Ninja Tables – Easy Data Table Builder

  Medium4.3
• CVE-2026-4160

  Fluent Forms – Customizable Contact Forms, Survey, Quiz, & Conversational Form Builder <= 6.1.21 - Insecure Direct Object Reference in Stripe SCA Confirmation to Unauthenticated Payment Status Modification

  techjewel · Fluent Forms – Customizable Contact Forms, Survey, Quiz, & Conversational Form Builder

  Medium5.3
• CVE-2026-2231

  Fluent Booking <= 2.0.01 - Unauthenticated Stored Cross-Site Scripting via Multiple Parameters

  techjewel · Fluent Booking – The Ultimate Appointments Scheduling, Events Booking, Events Calendar Solution

  High7.2