CVE-2026-111831

CVE-2026-111831 · WordPress FluentForm plugin <= 6.2.15 - Broken Access Control vulnerability

This page contains facts from public vulnerability sources. Check the original advisory before updating.

Missing Authorization vulnerability in WP ManageNinja LLC FluentForm fluentform allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects FluentForm: from n/a through 6.2.15.

CVSS 5.3 · Medium · EPSS 0.2% · Fix available

Published: 2026-10-19T12:24:22.785Z
Updated: 2026-10-19T14:28:05.700Z

Affected products and versions

fluentform
Versions
- ≥ 0, ≤ 6.2.15: Affected; ≥ 6.2.16: Not affected (custom)
Update to 6.2.16

Original sources

https://patchstack.com/database/wordpress/plugin/fluentform/vulnerability/wordpress-fluentform-plugin-6-2-15-broken-access-control-vulnerability?_s_id=cve
https://nvd.nist.gov/vuln/detail/CVE-2026-111831

Check your server →