Contact Form Plugin by Fluent Forms for Quiz, Survey, and Drag & Drop WP Form Builder, CVE-2025-69001
- CVE, Research URL
- Home page URL
- Application
-
Contact Form Plugin by Fluent Forms for Quiz, Survey, and Drag & Drop WP Form Builder
- Published on
- Jan 22, 2026
- Research Description
- Improper Control of Generation of Code ('Code Injection') vulnerability in Shahjahan Jewel FluentForm fluentform allows Code Injection.This issue affects FluentForm: from n/a through <= 6.1.11.
- Affected versions
-
max 6.1.11.
- Status
-
vulnerable
| Previous vulnerability researches |
|---|
| Kenta Companion (5bf94585af0489d21852c82a9f9157821b1edd20) , Jun 07, 2024 |
| Kenta Companion (CVE-2026-27090) , Feb 27, 2026 |