Vulnerabilities

TI-2026-20431 CVE-2026-25313 · GHSA-hrxh-f933-qcp6

WordPress FluentForm plugin <= 6.1.14 - Broken Access Control vulnerability

LOW 19

Missing Authorization vulnerability in Shahjahan Jewel FluentForm fluentform allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects FluentForm: from n/a through <= 6.1.14.

CVSS 3.1MEDIUM 4.3 Network Low privileges No interaction EPSS 0.00215 Published 2026-02-19 No fix listed CWE-862

TI-2026-20193 CVE-2026-25008 · GHSA-2rfp-jrr8-m33f

WordPress Ninja Tables plugin <= 5.2.5 - Sensitive Data Exposure vulnerability

LOW 20

Insertion of Sensitive Information Into Sent Data vulnerability in Shahjahan Jewel Ninja Tables ninja-tables allows Retrieve Embedded Sensitive Data.This issue affects Ninja Tables: from n/a through <= 5.2.5.

CVSS 3.1MEDIUM 4.3 Network Low privileges No interaction EPSS 0.00249 Published 2026-02-19 No fix listed CWE-201

TI-2025-42456 CVE-2025-69001 · GHSA-76rh-jcwv-2rf9

WordPress FluentForm plugin <= 6.1.11 - Arbitrary Shortcode Execution vulnerability

LOW 30

Improper Control of Generation of Code ('Code Injection') vulnerability in Shahjahan Jewel FluentForm fluentform allows Code Injection.This issue affects FluentForm: from n/a through <= 6.1.11.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00277 Published 2026-01-22 No fix listed CWE-94

TI-2025-41535 CVE-2025-67926 · GHSA-vv2m-g4cj-x269

WordPress Fluent Support plugin <= 1.10.4 - Broken Access Control vulnerability

LOW 29

Missing Authorization vulnerability in Shahjahan Jewel Fluent Support fluent-support allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Fluent Support: from n/a through <= 1.10.4.

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.00294 Published 2026-01-08 No fix listed CWE-862

TI-2025-42794 CVE-2025-69351 · GHSA-w3f7-89vf-g52j

WordPress Ninja Tables plugin <= 5.2.4 - SQL Injection vulnerability

LOW 36

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Shahjahan Jewel Ninja Tables ninja-tables allows Blind SQL Injection.This issue affects Ninja Tables: from n/a through…

CVSS 3.1HIGH 8.5 Network Low privileges No interaction EPSS 0.00243 Published 2026-01-06 No fix listed CWE-89

TI-2025-41351 CVE-2025-67597 · GHSA-96gg-frg8-8w89

WordPress Fluent Booking plugin <= 1.9.11 - Broken Access Control vulnerability

LOW 19

Missing Authorization vulnerability in Shahjahan Jewel Fluent Booking fluent-booking allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Fluent Booking: from n/a through <= 1.9.11.

CVSS 3.1MEDIUM 4.3 Network Low privileges No interaction EPSS 0.00175 Published 2025-12-09 No fix listed CWE-862

TI-2025-41273 CVE-2025-67519 · GHSA-v3j5-8g9v-3768

WordPress Ninja Tables plugin <= 5.2.3 - SQL Injection vulnerability

LOW 34

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Shahjahan Jewel Ninja Tables ninja-tables allows SQL Injection.This issue affects Ninja Tables: from n/a through <= 5.…

CVSS 3.1HIGH 7.6 Network High privileges No interaction EPSS 0.00421 Published 2025-12-09 No fix listed CWE-89

TI-2025-40609 CVE-2025-66084 · GHSA-jpcx-8gp4-xh25

WordPress FluentCommunity plugin <= 2.0.0 - Broken Access Control vulnerability

LOW 19

Missing Authorization vulnerability in Shahjahan Jewel FluentCommunity fluent-community allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects FluentCommunity: from n/a through <= 2.0.…

CVSS 3.1MEDIUM 4.3 Network Low privileges No interaction EPSS 0.00188 Published 2025-11-21 No fix listed CWE-862

TI-2025-33283 CVE-2025-53316 · GHSA-8q3g-wc86-q94h

WordPress WP GDPR Cookie Consent plugin <= 1.0.0 - Cross Site Request Forgery (CSRF) Vulnerability

LOW 30

Cross-Site Request Forgery (CSRF) vulnerability in Shahjahan Jewel WP GDPR Cookie Consent wp-gdpr-cookie-consent allows Stored XSS.This issue affects WP GDPR Cookie Consent: from n/a through <= 1.0.0.

CVSS 3.1HIGH 7.1 Network No auth User interaction EPSS 0.00127 Published 2025-11-06 No fix listed CWE-352

TI-2025-35739 CVE-2025-57885 · GHSA-323h-r7fc-3rm2

WordPress Fluent Support Plugin <= 1.9.1 - Cross Site Request Forgery (CSRF) Vulnerability

LOW 19

Cross-Site Request Forgery (CSRF) vulnerability in Shahjahan Jewel Fluent Support fluent-support allows Cross Site Request Forgery.This issue affects Fluent Support: from n/a through <= 1.9.1.

CVSS 3.1MEDIUM 4.3 Network No auth User interaction EPSS 0.00128 Published 2025-08-22 No fix listed CWE-352

TI-2025-33855 CVE-2025-54010 · GHSA-3jc2-q7fh-c58x

WordPress FluentSnippets plugin <= 10.50 - Cross Site Request Forgery (CSRF) Vulnerability

MEDIUM 42

Cross-Site Request Forgery (CSRF) vulnerability in Shahjahan Jewel FluentSnippets easy-code-manager allows Cross Site Request Forgery.This issue affects FluentSnippets: from n/a through <= 10.50.

CVSS 3.1CRITICAL 9.6 Network No auth User interaction EPSS 0.00192 Published 2025-07-16 No fix listed CWE-352

TI-2025-26292 CVE-2025-39550 · GHSA-m348-vxx3-44qv

WordPress FluentCommunity plugin <= 1.2.15 - PHP Object Injection Vulnerability

MEDIUM 49

Deserialization of Untrusted Data vulnerability in Shahjahan Jewel FluentCommunity fluent-community allows Object Injection.This issue affects FluentCommunity: from n/a through <= 1.2.15.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00508 Published 2025-04-17 No fix listed CWE-502

TI-2025-18456 CVE-2025-24739 · GHSA-xv3x-4h27-q4j5

WordPress FluentSMTP plugin <= 2.2.80 - Cross Site Request Forgery (CSRF) vulnerability

LOW 19

Cross-Site Request Forgery (CSRF) vulnerability in Shahjahan Jewel FluentSMTP fluent-smtp allows Cross Site Request Forgery.This issue affects FluentSMTP: from n/a through <= 2.2.80.

CVSS 3.1MEDIUM 4.3 Network No auth User interaction EPSS 0.002 Published 2025-01-24 No fix listed CWE-352

TI-2024-34700 CVE-2024-51796 · GHSA-8hj6-f2qf-5rxh

WordPress Trendy Restaurant Menu plugin <= 1.0.0 - Cross Site Scripting (XSS) vulnerability

LOW 29

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Shahjahan Jewel Trendy Restaurant Menu trendy-restaurant-menu allows DOM-Based XSS.This issue affects Trendy Restauran…

CVSS 3.1MEDIUM 6.5 Network Low privileges User interaction EPSS 0.00413 Published 2024-11-19 No fix listed CWE-79

Vulnerabilities

Filters