PLUGIN SECURITY
Is Fluent Support – Helpdesk & Customer Support Ticket System safe?
Known vulnerabilities, PHP compatibility and safer alternatives for the Fluent Support – Helpdesk & Customer Support Ticket System WordPress plugin — checked against WP Clinic's local security database.
What this plugin does
- Slug:
fluent-support
Maintenance status
Known vulnerabilities
12 known CVEs on file for Fluent Support – Helpdesk & Customer Support Ticket System.
| CVE | Vulnerability | Type | Severity | Affected | Fixed in | Published | Status |
|---|---|---|---|---|---|---|---|
| CVE-2026-119213 | Fluent Support – Helpdesk & Customer Support Ticket System [fluent-support] < 2.5.0 | Authorization Bypass Through User-Controlled Key | Low 3.7 | < 2.5.0 | 2.5.0 | 2026-09-23 | — |
| CVE-2026-14197 | Fluent Support – Helpdesk & Customer Support Ticket System [fluent-support] < 2.3.1 | Authorization Bypass Through User-Controlled Key | Unknown | < 2.3.1 | 2.3.1 | 2026-08-01 | — |
| CVE-2026-94679 | Fluent Support – Helpdesk & Customer Support Ticket System [fluent-support] < 2.4.0 | Missing Authorization | Medium 5.4 | < 2.4.0 | 2.4.0 | 2026-08-01 | — |
| CVE-2025-67926 | Fluent Support – Helpdesk & Customer Support Ticket System [fluent-support] < 1.10.5 | Missing Authorization | Medium 6.5 | < 1.10.5 | 1.10.5 | 2026-01-05 | — |
| CVE-2025-57885 | Fluent Support – Helpdesk & Customer Support Ticket System [fluent-support] < 1.9.2 | Cross-Site Request Forgery (CSRF) | Medium 4.3 | < 1.9.2 | 1.9.2 | 2025-08-22 | — |
| CVE-2024-13568 | Fluent Support – Helpdesk & Customer Support Ticket System [fluent-support] < 1.8.6 | Exposure of Sensitive Information to an Unauthorized Actor | High 7.5 | < 1.8.6 | 1.8.6 | 2025-02-28 | — |
| CVE-2024-47304 | Fluent Support – Helpdesk & Customer Support Ticket System [fluent-support] < 1.8.1 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') | High 8.5 | < 1.8.1 | 1.8.1 | 2024-09-25 | — |
| CVE-2024-47302 | Fluent Support – Helpdesk & Customer Support Ticket System [fluent-support] < 1.8.1 | Missing Authorization | Medium 5.3 | < 1.8.1 | 1.8.1 | 2024-09-25 | — |
+ 6 more known vulnerabilities
| CVE | Vulnerability | Type | Severity | Affected | Fixed in | Published | Status |
|---|---|---|---|---|---|---|---|
| CVE-2023-51547 | Fluent Support – Helpdesk & Customer Support Ticket System [fluent-support] < 1.7.7 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') | High 7.6 | < 1.7.7 | 1.7.7 | 2023-12-27 | — |
| CVE-2022-2559 | Fluent Support – Helpdesk & Customer Support Ticket System [fluent-support] < 1.5.8 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') | High 7.2 | < 1.5.8 | 1.5.8 | 2022-08-02 | — |
| — | Fluent Support – Helpdesk & Customer Support Ticket System [fluent-support] < 2.3.1 | — | Medium 6.4 | < 2.3.1 | 2.3.1 | 0000-00-00 | — |
| — | Fluent Support – Helpdesk & Customer Support Ticket System [fluent-support] < 2.3.1 | — | Unknown | < 2.3.1 | 2.3.1 | 0000-00-00 | — |
| CVE-2026-15665 | Fluent Support < 2.3.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'redirect-to' Shortcode Attribute | — | Unknown | < 2.3.1 | 2.3.1 | — | — |
| CVE-2026-65470 | Fluent Support – Helpdesk & Customer Support Ticket System < 2.3.1 - Authenticated (Contributor+) Stored Cross-Site Scripting | — | Unknown | < 2.3.1 | 2.3.1 | — | — |
How to fix it
Update this plugin to the latest release from wordpress.org — each CVE above lists the exact release that fixed it ("Fixed in") when one is on file.
This is the plugin's full known vulnerability history, not a scan of any specific installation — run a free scan of your own site to check your exact installed version.
Check your own WordPress site
Run a free passive scan now, or create a free account and install the WP Clinic plugin for a deep scan of your whole hosting account and AI-assisted repair.