Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

2 records

Vendor: WP ManageNinja LLC Component: Fluentcrm Clear all filters
TI-2024-20156 CVE-2024-30430 · GHSA-637c-qr5f-c3c8

WordPress FluentCRM plugin <= 2.8.44 - Cross Site Scripting (XSS) vulnerability

Priority LOW 26

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in WP Email Newsletter Team - FluentCRM Fluent CRM allows Stored XSS.This issue affects Fluent CRM: from n/a through 2.8.…

CVSS 3.1MEDIUM 5.9 Network High privileges User interaction EPSS 0.00356 Published 2024-03-29 No fix listed CWE-79
TI-2023-01351 CVE-2023-1430 · GHSA-mwm9-j9xx-52cw

FluentCRM - Marketing Automation For WordPress <= 2.8.01 - Insufficient Use of Hash as Authorization Control

Priority LOW 36

The FluentCRM - Marketing Automation For WordPress plugin for WordPress is vulnerable to unauthorized modification of data in versions up to, and including, 2.8.01 due to the use of an MD5 hash without a salt to control…

CVSS 3.1MEDIUM 6.5 Network No auth No interaction EPSS 0.00802 Published 2023-06-09 No fix listed CWE-759