Live › vulnerability › CVE-2026-111831
Go to dashboardFluentForm, a WordPress form builder plugin by WP ManageNinja, has a missing authorization check in versions through 6.2.15. The sources do not say what an attacker can do with it beyond reaching functions that should be restricted.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-10-23 21:57 UTC. All times on this page are UTC.
Sites running the FluentForm WordPress plugin at version 6.2.15 or earlier. The sources do not say which plugin features or configurations are required to be exposed, so whether a given site is reachable is unknown.
No product ranges from the sources yet.
wp plugin get fluentform --field=version6.2.15: fixed version number not stated in the sourcesEach row is the first time that source carried this signal. The analyst’s rows are its own findings.
Missing Authorization vulnerability in WP ManageNinja LLC FluentForm fluentform allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects FluentForm: from n/a through 6.2.15.
This page as .md · .json · in your agent: get_signal("CVE-2026-111831")
NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.