WordPress security by component
Fluent Support
Plugin description
Fluent Support is a WordPress component with 8 published CVE records in this archive. The latest tracked vulnerability was published Jul 23, 2026; the highest CVE/CNA score is 8.5.
Plugin slug:
fluent-supportLatest vulnerability
CVE-2026-65470: Fluent Support: Cross-site scripting
Fluent Support is affected by cross-site scripting. Exposure depends on how the affected operation is made reachable by the site. Injected script can execute in the affected site's origin when the vulnerable output is viewed. The published affected range is n/a through 2.3.0.
| Safe version |
|
||
|---|---|---|---|
| Jul 23, 2026 |
CVE-2026-65470
Fluent Support: Cross-site scripting
Fluent Support is affected by cross-site scripting. Exposure depends on how the affected operation is made reachable by the site. Injected script can execute in the affected site's origin when the vulnerable output is viewed. The published affected range is n/a through 2.3.0.
|
2.3.1 |
CVE6.5
NVDPending
|
| Jan 08, 2026 |
CVE-2025-67926
Fluent Support: A security weakness
Fluent Support is affected by a security weakness. Exposure depends on how the affected operation is made reachable by the site. The resulting impact depends on how the affected component exposes the vulnerable operation.
|
See mitigation notes |
CVE6.5
NVDPending
|
| Aug 22, 2025 |
CVE-2025-57885
Fluent Support: Cross-site request forgery
Fluent Support is affected by cross-site request forgery. Exposure depends on how the affected operation is made reachable by the site. Exploitation relies on a signed-in privileged user submitting an attacker-controlled request.
|
See mitigation notes |
CVE4.3
NVDPending
|
| Mar 01, 2025 |
CVE-2024-13568
Fluent Support – Helpdesk & Customer Support Ticket System: Sensitive information exposure
Fluent Support – Helpdesk & Customer Support Ticket System is affected by sensitive information exposure. The vulnerable path is reachable without authentication. Successful exploitation can disclose data that should not be available to the caller.
|
See mitigation notes |
CVE7.5
NVDPending
|
| Nov 01, 2024 |
CVE-2024-47302
Fluent Support: A security weakness
Fluent Support is affected by a security weakness. Exposure depends on how the affected operation is made reachable by the site. The resulting impact depends on how the affected component exposes the vulnerable operation.
|
See mitigation notes |
CVE5.3
NVD9.8
|
| Oct 17, 2024 |
CVE-2024-47304
Fluent Support: SQL injection
Fluent Support is affected by SQL injection. Exposure depends on how the affected operation is made reachable by the site. A successful request can alter database queries and expose or modify WordPress data.
|
See mitigation notes |
CVE8.5
NVDPending
|
| Dec 31, 2023 |
CVE-2023-51547
Fluent Support – WordPress Helpdesk and Customer Support Ticket Plugin: SQL injection
Fluent Support – WordPress Helpdesk and Customer Support Ticket Plugin is affected by SQL injection. Exposure depends on how the affected operation is made reachable by the site. A successful request can alter database queries and expose or modify WordPress data.
|
See mitigation notes |
CVE7.6
NVD7.2
|
| Aug 29, 2022 |
CVE-2022-2559
Fluent Support: SQL injection
Fluent Support is affected by SQL injection. Exposure depends on how the affected operation is made reachable by the site. A successful request can alter database queries and expose or modify WordPress data.
|
See mitigation notes |
CVE7.2
NVD7.2
|