CVE-2026-111831: WordPress FluentForm plugin <= 6.2.15 - Broken Access Control vulnerability
Missing Authorization vulnerability in WP ManageNinja LLC FluentForm fluentform allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects FluentForm: from n/a through 6.2.15.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
WordPress FluentForm pluginto a version that resolves this vulnerability.Fixed in 6.2.16
Event History
Frequently Asked Questions
Who can exploit this issue?
The CVSS vector indicates that exploitation is network-accessible, requires no privileges, and requires no user interaction. An unauthenticated remote attacker may be able to exploit the affected access-control condition.
Which FluentForm versions are affected?
The issue affects FluentForm versions through 6.2.15. The available data does not identify a fixed version.
What is the potential impact?
The reported impact is limited to integrity, with no reported confidentiality or availability impact. Successful exploitation may allow unauthorized modification through incorrectly configured access-control levels.