EN ES
Start free
Menu

Fluent Forms: known security problems

46 known security problems reported for this WordPress plugin, with the affected versions, the fix and what to do.

Updated

In short

There are 46 known security problems on this page. Each one has a fixed version. Updating to version 6.2.16 or newer covers every fixed problem listed here.

Based on public reports. Check the plugin’s changelog. Watchfox AI may be wrong.

Get an email when your site is affected: install Watchfox AI (free)

This week

Someone could do things on your site they should not be allowed to (up to and including 6.2.15)

A trusted security source confirmed it. If your site has an affected version, fix it this week.

Affected versions
  • Up to and including 6.2.15
Fixed in
6.2.16
What to do
If your site has an affected version, update Fluent Forms to version 6.2.16 or newer.
Official ID
CVE-2026-111831
Report title
Fluent Forms – Customizable Contact Forms, Survey, Quiz, & Conversational Form Builder <= 6.2.15 - Missing Authorization
First reported
Sources
This week

Someone could do things on your site they should not be allowed to (up to and including 6.2.5)

A trusted security source confirmed it. If your site has an affected version, fix it this week.

Affected versions
  • Up to and including 6.2.5
Fixed in
6.2.6
What to do
If your site has an affected version, update Fluent Forms to version 6.2.6 or newer.
Official ID
CVE-2026-15178
Report title
Fluent Forms <= 6.2.5 - Missing Authorization to Authenticated (Custom+) Sensitive Data Exposure and Modification
First reported
Sources
This week

Someone could plant harmful code that runs for your visitors or admins (up to and including 6.2.14)

A trusted security source confirmed it. If your site has an affected version, fix it this week.

Affected versions
  • Up to and including 6.2.14
Fixed in
6.2.15
What to do
If your site has an affected version, update Fluent Forms to version 6.2.15 or newer.
Official ID
CVE-2026-101324
Report title
Fluent Forms <= 6.2.14 - Reflected Cross-Site Scripting via '{get.*}' Editor SmartCode Parameter
First reported
Sources
This week

Someone with a contributor account on your site could plant harmful code that runs for your visitors or admins (up to and including 6.2.14)

A trusted security source confirmed it. If your site has an affected version, fix it this week.

Affected versions
  • Up to and including 6.2.14
Fixed in
6.2.15
What to do
If your site has an affected version, update Fluent Forms to version 6.2.15 or newer.
Official ID
CVE-2026-103343
Report title
Fluent Forms – Customizable Contact Forms, Survey, Quiz, & Conversational Form Builder <= 6.2.14 - Authenticated (Contributor+) Stored Cross-Site Scripting
First reported
Sources
This week

Someone could do things on your site they should not be allowed to (up to and including 6.2.14)

A trusted security source confirmed it. If your site has an affected version, fix it this week.

Affected versions
  • Up to and including 6.2.14
Fixed in
6.2.15
What to do
If your site has an affected version, update Fluent Forms to version 6.2.15 or newer.
Official ID
CVE-2026-103353
Report title
Fluent Forms – Customizable Contact Forms, Survey, Quiz, & Conversational Form Builder <= 6.2.14 - Missing Authorization
First reported
Sources
This week

A stranger could plant harmful code that runs for your visitors or admins (up to and including 6.2.11)

A trusted security source confirmed it. If your site has an affected version, fix it this week.

Affected versions
  • Up to and including 6.2.11
Fixed in
6.2.12
What to do
If your site has an affected version, update Fluent Forms to version 6.2.12 or newer.
Official ID
CVE-2026-18146
Report title
Fluent Forms <= 6.2.11 - Unauthenticated Stored Cross-Site Scripting via Notification Smartcode Values
First reported
Sources
This week

Someone could use it to harm your site (up to and including 6.2.4)

A trusted security source confirmed it. If your site has an affected version, fix it this week.

Affected versions
  • Up to and including 6.2.4
Fixed in
6.2.5
What to do
If your site has an affected version, update Fluent Forms to version 6.2.5 or newer.
Official ID
CVE-2026-11578
Report title
Fluent Forms <= 6.2.4 - Insecure Direct Object Reference to Authenticated (Form Manager+) Cross-Form Submission Entry Deletion
First reported
Sources
This week

Anyone with an account on your site, even a basic one could use it to harm your site (up to and including 6.2.0)

A trusted security source confirmed it. If your site has an affected version, fix it this week.

Affected versions
  • Up to and including 6.2.0
Fixed in
6.2.1
What to do
If your site has an affected version, update Fluent Forms to version 6.2.1 or newer.
Official ID
CVE-2026-11880
Report title
Fluent Forms <= 6.2.0 - Insecure Direct Object Reference to Authenticated (Subscriber+) Subscription Cancellation
First reported
Sources
This week

Someone could plant harmful code that runs for your visitors or admins (up to and including 6.2.8)

A trusted security source confirmed it. If your site has an affected version, fix it this week.

Affected versions
  • Up to and including 6.2.8
Fixed in
6.2.9
What to do
If your site has an affected version, update Fluent Forms to version 6.2.9 or newer.
Official ID
CVE-2026-17571
Report title
Fluent Forms <= 6.2.8 - Reflected Cross-Site Scripting via 'param'
First reported
Sources
This week

A stranger could see private information they should not see

A trusted security source confirmed it. If your site has an affected version, fix it this week.

Affected versions
  • Up to and including 6.2.8
Fixed in
6.2.9
What to do
If your site has an affected version, update Fluent Forms to version 6.2.9 or newer.
Official ID
CVE-2026-17567
Report title
Fluent Forms <= 6.2.8 - Unauthenticated Sensitive Information Exposure via Insecure Direct Object Reference and Weak Transaction Hash in 'transaction' Parameter
First reported
Sources
This week

Someone with a contributor account on your site could plant harmful code that runs for your visitors or admins (before 6.2.6)

A trusted security source confirmed it. If your site has an affected version, fix it this week.

Affected versions
  • Before 6.2.6
Fixed in
6.2.6
What to do
If your site has an affected version, update Fluent Forms to version 6.2.6 or newer.
Official ID
CVE-2026-11881
Report title
Fluent Forms – Customizable Contact Forms, Survey, Quiz, & Conversational Form Builder < 6.2.6 - Authenticated (Contributor+) Stored Cross-Site Scripting
First reported
Sources
This week

A stranger could plant harmful code that runs for your visitors or admins (up to and including 6.2.7)

A trusted security source confirmed it. If your site has an affected version, fix it this week.

Affected versions
  • Up to and including 6.2.7
Fixed in
6.2.8
What to do
If your site has an affected version, update Fluent Forms to version 6.2.8 or newer.
Official ID
CVE-2026-16655
Report title
Fluent Forms <= 6.2.7 - Unauthenticated Stored Cross-Site Scripting via Name Field Nested `password` Member
First reported
Sources
This week

Anyone with an account on your site, even a basic one could use it to harm your site (up to and including 6.2.1)

A trusted security source confirmed it. If your site has an affected version, fix it this week.

Affected versions
  • Up to and including 6.2.1
Fixed in
6.2.2
What to do
If your site has an affected version, update Fluent Forms to version 6.2.2 or newer.
Official ID
CVE-2026-5069
Report title
Fluent Forms <= 6.2.1 - Incorrect Authorization to Authenticated (Subscriber+) Arbitrary Subscription Cancellation via 'subscription_id'
First reported
Sources
This week

Anyone with an account on your site, even a basic one could use it to harm your site (up to and including 6.2.0) (2)

A trusted security source confirmed it. If your site has an affected version, fix it this week.

Affected versions
  • Up to and including 6.2.0
Fixed in
6.2.1
What to do
If your site has an affected version, update Fluent Forms to version 6.2.1 or newer.
Official ID
CVE-2026-5395
Report title
Fluent Forms <= 6.2.0 - Authenticated (Subscriber+) Authorization Bypass via 'table' Parameter
First reported
Sources
This week

Anyone with an account on your site, even a basic one could use it to harm your site (up to and including 6.1.21)

A trusted security source confirmed it. If your site has an affected version, fix it this week.

Affected versions
  • Up to and including 6.1.21
Fixed in
6.2.0
What to do
If your site has an affected version, update Fluent Forms to version 6.2.0 or newer.
Official ID
CVE-2026-5396
Report title
Fluent Forms <= 6.1.21 - Authenticated (Subscriber+) Authorization Bypass via 'form_id' Parameter
First reported
Sources
This week

Someone with a contributor account on your site could plant harmful code that runs for your visitors or admins (up to and including 6.2.1)

A trusted security source confirmed it. If your site has an affected version, fix it this week.

Affected versions
  • Up to and including 6.2.1
Fixed in
6.2.2
What to do
If your site has an affected version, update Fluent Forms to version 6.2.2 or newer.
Official ID
CVE-2026-6828
Report title
Fluent Forms <= 6.2.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'permission_message' Shortcode Attribute
First reported
Sources
This week

Someone who already has an admin account could read or delete private files on your server

A trusted security source confirmed it. If your site has an affected version, fix it this week.

Affected versions
  • Up to and including 6.2.1
Fixed in
6.2.2
What to do
If your site has an affected version, update Fluent Forms to version 6.2.2 or newer.
Official ID
CVE-2026-6344
Report title
Fluent Forms <= 6.2.1 - Authenticated (Administrator+) Arbitrary File Read via Path Traversal in Email Attachment
First reported
Sources
This week

A stranger could use it to harm your site (from 6.1.21 up to and including 6.1.21)

A trusted security source confirmed it. If your site has an affected version, fix it this week.

Affected versions
  • From 6.1.21 up to and including 6.1.21
Fixed in
6.2.0
What to do
If your site has an affected version, update Fluent Forms to version 6.2.0 or newer.
Official ID
CVE-2026-4160
Report title
Fluent Forms – Customizable Contact Forms, Survey, Quiz, & Conversational Form Builder <= 6.1.21 - Insecure Direct Object Reference in Stripe SCA Confirmation to Unauthenticated Payment Status Modification
First reported
Sources
This week

Anyone with an account on your site, even a basic one could plant harmful code that runs for your visitors or admins (up to and including 6.1.14)

A trusted security source confirmed it. If your site has an affected version, fix it this week.

Affected versions
  • Up to and including 6.1.14
Fixed in
6.1.15
What to do
If your site has an affected version, update Fluent Forms to version 6.1.15 or newer.
Official ID
CVE-2026-0996
Report title
Fluent Forms <= 6.1.14 - Authenticated (Subscriber+) Stored Cross-Site Scripting via AI Form Builder Module
First reported
Sources
This week

Someone could do things on your site they should not be allowed to (up to and including 6.1.14)

A trusted security source confirmed it. If your site has an affected version, fix it this week.

Affected versions
  • Up to and including 6.1.14
Fixed in
6.1.15
What to do
If your site has an affected version, update Fluent Forms to version 6.1.15 or newer.
Official ID
CVE-2026-25313
Report title
Fluent Forms – Customizable Contact Forms, Survey, Quiz, & Conversational Form Builder <= 6.1.14 - Missing Authorization
First reported
Sources
This week

A stranger could use it to harm your site (up to and including 6.1.11)

A trusted security source confirmed it. If your site has an affected version, fix it this week.

Affected versions
  • Up to and including 6.1.11
Fixed in
6.1.12
What to do
If your site has an affected version, update Fluent Forms to version 6.1.12 or newer.
Official ID
CVE-2025-69001
Report title
FluentForm <= 6.1.11 - Unauthenticated Arbitrary Shortcode Execution
First reported
Sources
This week

Anyone with an account on your site, even a basic one could do things on your site they should not be allowed to (up to and including 6.1.7)

A trusted security source confirmed it. If your site has an affected version, fix it this week.

Affected versions
  • Up to and including 6.1.7
Fixed in
6.1.8
What to do
If your site has an affected version, update Fluent Forms to version 6.1.8 or newer.
Official ID
CVE-2025-13722
Report title
Fluent Forms <= 6.1.7 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Form Creation via AI Builder
First reported
Sources
This week

A stranger could use it to harm your site (up to and including 6.1.7)

A trusted security source confirmed it. If your site has an affected version, fix it this week.

Affected versions
  • Up to and including 6.1.7
Fixed in
6.1.8
What to do
If your site has an affected version, update Fluent Forms to version 6.1.8 or newer.
Official ID
CVE-2025-13748
Report title
Fluent Forms <= 6.1.7 - Unauthenticated Insecure Direct Object Reference to Payment Status Tampering via submission_id
First reported
Sources
This week

Anyone with an account on your site, even a basic one could read or delete private files on your server

A trusted security source confirmed it. If your site has an affected version, fix it this week.

Affected versions
  • From 5.1.16 up to and including 6.1.1
Fixed in
6.1.2
What to do
If your site has an affected version, update Fluent Forms to version 6.1.2 or newer.
Official ID
CVE-2025-9260
Report title
Fluent Forms – Customizable Contact Forms, Survey, Quiz, & Conversational Form Builder 5.1.16 - 6.1.1 - Authenticated (Subscriber+) PHP Object Injection To Arbitrary File Read
First reported
Sources
This week

Someone with a contributor account on your site could plant harmful code that runs for your visitors or admins (up to and including 6.0.2)

A trusted security source confirmed it. If your site has an affected version, fix it this week.

Affected versions
  • Up to and including 6.0.2
Fixed in
6.0.3
What to do
If your site has an affected version, update Fluent Forms to version 6.0.3 or newer.
Official ID
CVE-2025-3615
Report title
Fluent Forms <= 6.0.2 - Authenticated (Contributor+) Stored Cross-Site Scripting
First reported
Sources
This week

Someone could use it to harm your site (up to and including 5.2.12)

A trusted security source confirmed it. If your site has an affected version, fix it this week.

Affected versions
  • Up to and including 5.2.12
Fixed in
6.0.0
What to do
If your site has an affected version, update Fluent Forms to version 6.0.0 or newer.
Official ID
CVE-2024-13666
Report title
Fluent Forms – Customizable Contact Forms, Survey, Quiz, & Conversational Form Builder <= 5.2.12 - IP-Spoofing
First reported
Sources
This week

A stranger could plant harmful code that runs for your visitors or admins (up to and including 5.2.6)

A trusted security source confirmed it. If your site has an affected version, fix it this week.

Affected versions
  • Up to and including 5.2.6
Fixed in
5.2.7
What to do
If your site has an affected version, update Fluent Forms to version 5.2.7 or newer.
Official ID
CVE-2024-10646
Report title
Contact Form Plugin by Fluent Forms for Quiz, Survey, and Drag & Drop WP Form Builder <= 5.2.6 - Unauthenticated Stored Cross-Site Scripting via Form Subject
First reported
Sources
This week

Someone could plant harmful code that runs for your visitors or admins (up to and including 5.2.0)

A trusted security source confirmed it. If your site has an affected version, fix it this week.

Affected versions
  • Up to and including 5.2.0
Fixed in
5.2.1
What to do
If your site has an affected version, update Fluent Forms to version 5.2.1 or newer.
Official ID
CVE-2024-9651
Report title
Fluent Forms <= 5.2.0 - Authenticated (Admin+) Stored Cross-Site Scripting
First reported
Sources
This week

Someone could plant harmful code that runs for your visitors or admins (up to and including 5.1.19)

A trusted security source confirmed it. If your site has an affected version, fix it this week.

Affected versions
  • Up to and including 5.1.19
Fixed in
5.1.20
What to do
If your site has an affected version, update Fluent Forms to version 5.1.20 or newer.
Official ID
CVE-2024-9528
Report title
Contact Form Plugin by Fluent Forms for Quiz, Survey, and Drag & Drop WP Form Builder <= 5.1.19 - Authenticated (Form Manager+) Stored Cross-Site Scripting
First reported
Sources
This week

Anyone with an account on your site, even a basic one could do things on your site they should not be allowed to (up to and including 5.1.18)

A trusted security source confirmed it. If your site has an affected version, fix it this week.

Affected versions
  • Up to and including 5.1.18
Fixed in
5.1.19
What to do
If your site has an affected version, update Fluent Forms to version 5.1.19 or newer.
Official ID
CVE-2024-5053
Report title
Contact Form Plugin by Fluent Forms for Quiz, Survey, and Drag & Drop WP Form Builder <= 5.1.18 - Missing Authorization to Authenticated (Subscriber+) Mailchimp Integration Modification
First reported
Sources
This week

Someone who already has an admin account could plant harmful code that runs for your visitors or admins (up to and including 5.1.19)

A trusted security source confirmed it. If your site has an affected version, fix it this week.

Affected versions
  • Up to and including 5.1.19
Fixed in
5.1.20
What to do
If your site has an affected version, update Fluent Forms to version 5.1.20 or newer.
Official ID
CVE-2024-6520
Report title
Contact Form Plugin by Fluent Forms for Quiz, Survey, and Drag & Drop WP Form Builder <= 5.1.19 - Authenticated (Administrator+) Stored Cross-Site Scripting
First reported
Sources
This week

Someone who already has an admin account could plant harmful code that runs for your visitors or admins (up to and including 5.1.19) (2)

A trusted security source confirmed it. If your site has an affected version, fix it this week.

Affected versions
  • Up to and including 5.1.19
Fixed in
5.1.20
What to do
If your site has an affected version, update Fluent Forms to version 5.1.20 or newer.
Official ID
CVE-2024-6518
Report title
Contact Form Plugin by Fluent Forms for Quiz, Survey, and Drag & Drop WP Form Builder <= 5.1.19 - Authenticated (Administrator+) Stored Cross-Site Scripting
First reported
Sources
This week

Someone who already has an admin account could plant harmful code that runs for your visitors or admins (up to and including 5.1.19) (3)

A trusted security source confirmed it. If your site has an affected version, fix it this week.

Affected versions
  • Up to and including 5.1.19
Fixed in
5.1.20
What to do
If your site has an affected version, update Fluent Forms to version 5.1.20 or newer.
Official ID
CVE-2024-6521
Report title
Contact Form Plugin by Fluent Forms for Quiz, Survey, and Drag & Drop WP Form Builder <= 5.1.19 - Authenticated (Administrator+) Stored Cross-Site Scripting
First reported
Sources
This week

Anyone with an account on your site, even a basic one could plant harmful code that runs for your visitors or admins (up to and including 5.1.19)

A trusted security source confirmed it. If your site has an affected version, fix it this week.

Affected versions
  • Up to and including 5.1.19
Fixed in
5.1.20
What to do
If your site has an affected version, update Fluent Forms to version 5.1.20 or newer.
Official ID
CVE-2024-6703
Report title
Contact Form Plugin by Fluent Forms for Quiz, Survey, and Drag & Drop WP Form Builder <= 5.1.19 - Authenticated (Subscriber+) Stored Cross-Site Scripting via Welcome Screen Fields
First reported
Sources
This week

Someone could in some setups, take over your site

A trusted security source confirmed it. If your site has an affected version, fix it this week.

Affected versions
  • Up to and including 5.1.15
Fixed in
5.1.16
What to do
If your site has an affected version, update Fluent Forms to version 5.1.16 or newer.
Official ID
CVE-2024-4157
Report title
Contact Form Plugin by Fluent Forms for Quiz, Survey, and Drag & Drop WP Form Builder <= 5.1.15 - PHP Object Injection via extractDynamicValues
First reported
Sources
This week

Anyone with an account on your site, even a basic one could plant harmful code that runs for your visitors or admins (up to and including 5.1.13)

A trusted security source confirmed it. If your site has an affected version, fix it this week.

Affected versions
  • Up to and including 5.1.13
Fixed in
5.1.14
What to do
If your site has an affected version, update Fluent Forms to version 5.1.14 or newer.
Official ID
CVE-2024-2772
Report title
Contact Form Plugin by Fluent Forms for Quiz, Survey, and Drag & Drop WP Form Builder <= 5.1.13 - Authenticated (Subscriber+) Stored Cross-Site Scripting
First reported
Sources
This week

Someone could do things on your site they should not be allowed to (up to and including 5.1.16)

A trusted security source confirmed it. If your site has an affected version, fix it this week.

Affected versions
  • Up to and including 5.1.16
Fixed in
5.1.17
What to do
If your site has an affected version, update Fluent Forms to version 5.1.17 or newer.
Official ID
CVE-2024-2782
Report title
Contact Form Plugin by Fluent Forms for Quiz, Survey, and Drag & Drop WP Form Builder <= 5.1.16 - Missing Authorization to Setting Manipulation
First reported
Sources
This week

Someone could take over your site as an admin

A trusted security source confirmed it. If your site has an affected version, fix it this week.

Affected versions
  • Up to and including 5.1.16
Fixed in
5.1.17
What to do
If your site has an affected version, update Fluent Forms to version 5.1.17 or newer.
Official ID
CVE-2024-2771
Report title
Contact Form Plugin by Fluent Forms for Quiz, Survey, and Drag & Drop WP Form Builder <= 5.1.16 - Missing Authorization to Settings Update and Limited Privilege Escalation
First reported
Sources
This week

Someone with a contributor account on your site could plant harmful code that runs for your visitors or admins (up to and including 5.1.16)

A trusted security source confirmed it. If your site has an affected version, fix it this week.

Affected versions
  • Up to and including 5.1.16
Fixed in
5.1.17
What to do
If your site has an affected version, update Fluent Forms to version 5.1.17 or newer.
Official ID
CVE-2024-4709
Report title
Contact Form Plugin by Fluent Forms for Quiz, Survey, and Drag & Drop WP Form Builder <= 5.1.16 - Authenticated (Contributor+) Stored Cross-Site Scripting
First reported
Sources
This week

Someone with a contributor account on your site could plant harmful code that runs for your visitors or admins (up to and including 5.1.9)

A trusted security source confirmed it. If your site has an affected version, fix it this week.

Affected versions
  • Up to and including 5.1.9
Fixed in
5.1.10
What to do
If your site has an affected version, update Fluent Forms to version 5.1.10 or newer.
Official ID
CVE-2023-6957
Report title
Fluent Forms <= 5.1.9 - Authenticated (Contributor+) Stored Cross-Site Scripting
First reported
Sources
This week

Someone who already has an admin account could plant harmful code that runs for your visitors or admins (up to and including 5.1.5)

A trusted security source confirmed it. If your site has an affected version, fix it this week.

Affected versions
  • Up to and including 5.1.5
Fixed in
5.1.7
What to do
If your site has an affected version, update Fluent Forms to version 5.1.7 or newer.
Official ID
CVE-2024-0618
Report title
Fluent Forms <= 5.1.5 - Authenticated(Administrator+) Stored Cross-Site Scripting via imported form title
First reported
Sources
This week

Someone could use it to harm your site (before 5.0.9)

A trusted security source confirmed it. If your site has an affected version, fix it this week.

Affected versions
  • Before 5.0.9
Fixed in
5.0.9
What to do
If your site has an affected version, update Fluent Forms to version 5.0.9 or newer.
Official ID
CVE-2023-41952
Report title
Contact Form for Plugin by Fluent Forms <= 5.0.8 - Insecure Direct Object Reference
First reported
Sources
This week

Someone who already has an admin account could read or change the data in your site’s database

A trusted security source confirmed it. If your site has an affected version, fix it this week.

Affected versions
  • Up to and including 4.3.25
Fixed in
5.0.0
What to do
If your site has an affected version, update Fluent Forms to version 5.0.0 or newer.
Official ID
CVE-2023-24410
Report title
FluentForm <= 4.3.25 - Authenticated (Administrator+) SQL Injection
First reported
Sources
This week

Someone with a contributor account on your site could plant harmful code that runs for your visitors or admins (up to and including 4.3.24)

A trusted security source confirmed it. If your site has an affected version, fix it this week.

Affected versions
  • Up to and including 4.3.24
Fixed in
4.3.25
What to do
If your site has an affected version, update Fluent Forms to version 4.3.25 or newer.
Official ID
CVE-2023-0546
Report title
FluentForms <= 4.3.24 - Authenticated(Contributor+) Stored Cross-Site Scripting
First reported
Sources
This week

Someone could use it to harm your site (up to and including 4.3.12)

A trusted security source confirmed it. If your site has an affected version, fix it this week.

Affected versions
  • Up to and including 4.3.12
Fixed in
4.3.13
What to do
If your site has an affected version, update Fluent Forms to version 4.3.13 or newer.
Official ID
CVE-2022-3463
Report title
Contact Form Plugin by FluentForm <= 4.3.12 - CSV Injection
First reported
Sources
This week

Someone could plant harmful code that runs for your visitors or admins (before 3.6.67)

A trusted security source confirmed it. If your site has an affected version, fix it this week.

Affected versions
  • Before 3.6.67
Fixed in
3.6.67
What to do
If your site has an affected version, update Fluent Forms to version 3.6.67 or newer.
Official ID
CVE-2021-34620
Report title
WP Fluent Forms < 3.6.67 - Stored Cross-Site Scripting
First reported
Sources

Where this comes from

We collect these reports from public security sources and rewrite them in plain words. Each problem shows its sources and the date we first saw it. This page never says whether your own site is affected: only a check of your site’s versions can tell.

All plugins and themes

Get an email when your site is affected.

Install Watchfox AI once. It checks your plugins and themes against this list every day, for free.

Install Watchfox AI (free)