Contact Form Plugin by Fluent Forms for Quiz, Survey, and Drag & Drop WP Form Builder, CVE-2026-11880
- CVE, Research URL
- Home page URL
- Application
-
Contact Form Plugin by Fluent Forms for Quiz, Survey, and Drag & Drop WP Form Builder
- Published on
- Jul 01, 2026
- Research Description
- The Fluent Forms WordPress plugin before 6.2.1 does not properly verify ownership before processing a subscription cancellation request, allowing authenticated users with a low-privilege account to cancel subscriptions belonging to other users.
- Affected versions
-
max 6.2.1.
- Status
-
vulnerable