CVE-2026-94669: WordPress Fluent Forms Pro Add On Pack plugin <= 6.2.13 - Broken Access Control vulnerability
Missing Authorization vulnerability in WP ManageNinja LLC Fluent Forms Pro Add On Pack fluentformpro allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Fluent Forms Pro Add On Pack: from n/a through 6.2.13.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
WordPress Fluent Forms Pro Add On Packto a version that resolves this vulnerability.Fixed in 6.2.14
Event History
Frequently Asked Questions
What level of access does an attacker need to exploit this issue?
The vulnerability is remotely exploitable over the network and does not require prior privileges or user interaction. The supplied severity vector indicates low attack complexity.
What is the expected impact if exploitation succeeds?
The reported impact is limited to integrity, meaning an attacker may be able to make unauthorized changes. No confidentiality or availability impact is reported.
How can I determine whether my installation is affected?
Installations of Fluent Forms Pro Add On Pack through version 6.2.13 are affected. Check the installed plugin version and treat version 6.2.13 or earlier as affected based on the provided scope.