WP Clinic
Log in Sign up

CVE

CVE-2026-11880 — Fluent Forms – Customizable Contact Forms, Survey, Quiz, & Conversational Form Builder [fluentform] < 6.2.1

CVE Vulnerability Type Severity Affected Fixed in Published Status
CVE-2026-11880 Fluent Forms – Customizable Contact Forms, Survey, Quiz, & Conversational Form Builder [fluentform] < 6.2.1 Authorization Bypass Through User-Controlled Key Unknown < 6.2.1 6.2.1 2026-07-01

CVE-2026-11880

The Fluent Forms WordPress plugin before 6.2.1 does not properly verify ownership before processing a subscription cancellation request, allowing authenticated users with a low-privilege account to cancel subscriptions belonging to other users.

Source: CVE.org

Scan your WordPress site free

No signup, no credit card — enter your URL and get a security report in seconds.