# techjewel Fluent Forms Pro Add On Pack.

Every CVE that names techjewel Fluent Forms Pro Add On Pack among its affected products, newest first. Vendors and products are as the CNA wrote them.

## Records, newest first

- [Fluent Forms Pro Add On Pack <= 6.2.6 - Authenticated (Subscriber+) PHP Object Injection to Arbitrary User Password Change via User Meta Field](https://agentprime.io/advisories/CVE-2026-15962.md)
  `CVE-2026-15962` · CVE record: techjewel Fluent Forms Pro Add On Pack · CVSS 8.8 High · Not analysed yet · Published 26 Jul 2026 · Tags: Insecure deserialization
- [Fluent Forms Pro Add On Pack <= 6.1.17 - Missing Authorization to Unauthenticated Arbitrary Attachment Deletion](https://agentprime.io/advisories/CVE-2026-2899.md)
  `CVE-2026-2899` · CVE record: techjewel Fluent Forms Pro Add On Pack · CVSS 6.5 Medium · Not analysed yet · Published 5 Mar 2026 · Tags: Broken access control
- [Fluent Forms Pro <= 6.1.17 - Unauthenticated Stored Cross-Site Scripting via Draft Form Submission](https://agentprime.io/advisories/CVE-2026-2365.md)
  `CVE-2026-2365` · CVE record: techjewel Fluent Forms Pro Add On Pack · CVSS 7.2 High · Not analysed yet · Published 5 Mar 2026 · Tags: Cross-site scripting (XSS)
- [Fluent Forms Pro Add On Pack <= 6.1.17 - Missing Authorization to Unauthenticated Payment Status modification](https://agentprime.io/advisories/CVE-2026-2428.md)
  `CVE-2026-2428` · CVE record: techjewel Fluent Forms Pro Add On Pack · CVSS 7.5 High · Not analysed yet · Published 27 Feb 2026 · Tags: CWE-345
- [Fluent Forms Pro Add On Pack <= 6.1.12 - Authenticated (Subscriber+) Server-Side Request Forgery via 'saveDataSource'](https://agentprime.io/advisories/CVE-2026-0632.md)
  `CVE-2026-0632` · CVE record: techjewel Fluent Forms Pro Add On Pack · CVSS 5.4 Medium · Not analysed yet · Published 9 Feb 2026 · Tags: Server-side request forgery (SSRF)

## Filters and formats

Filters are query parameters on this URL: `q` (words, as in a web search engine: `"a phrase"`, `OR`, `-word`; an id; a package or product name), `severity` (low, medium, high or critical), `critical=1`, `kev=1`, `ecosystem` (npm, pypi, packagist, go, maven, rubygems, crates, nuget, hex), `kind=package`, `assigner` (a CNA’s short name), `min_score` and `state`. Each record’s title links to its Markdown page.

- The same list as JSON: <https://api.agentprime.io/v1/advisories?technology=techjewel-fluent-forms-pro-add-on-pack>
- Every list: <https://agentprime.io/advisories.md>, critical: <https://agentprime.io/advisories/critical.md>; by weakness: <https://agentprime.io/advisories/tag/sql-injection.md> and the other tags in <https://agentprime.io/llms.txt>; by technology: `/advisories/technology/<slug>.md` (`fortinet-fortimail`)

---

The web page: <https://agentprime.io/advisories/technology/techjewel-fluent-forms-pro-add-on-pack/>. Everything for agents: <https://agentprime.io/llms.txt>.