← WordPress Vulnerabilities
WordPress security by component

Fluent Forms – Customizable Contact Forms, Survey, Quiz, & Conversational Form Builder

Fluent Forms – Customizable Contact Forms, Survey, Quiz, & Conversational Form Builder is a WordPress component with 5 published CVE records in this archive. The latest tracked vulnerability was published May 14, 2026; the highest CVE/CNA score is 8.2.

Plugin slug: forms-customizable-contact-forms-survey-quiz-conversational-form-builder

CVE-2026-5395: Fluent Forms – Customizable Contact Forms, Survey, Quiz, & Conversational Form Builder: A security weakness

Fluent Forms – Customizable Contact Forms, Survey, Quiz, & Conversational Form Builder is affected by a security weakness. Exploitation requires an authenticated WordPress account. The resulting impact depends on how the affected component exposes the vulnerable operation. The published affected range is <= 6.2.0.

PublishedMay 14, 2026
Known safe version> 6.2.0
Safe version
May 14, 2026 CVE-2026-5395
Fluent Forms – Customizable Contact Forms, Survey, Quiz, & Conversational Form Builder: A security weakness
Fluent Forms – Customizable Contact Forms, Survey, Quiz, & Conversational Form Builder is affected by a security weakness. Exploitation requires an authenticated WordPress account. The resulting impact depends on how the affected component exposes the vulnerable operation. The published affected range is <= 6.2.0.
> 6.2.0
CVE8.2
NVDPending
Apr 16, 2026 CVE-2026-4160
Fluent Forms – Customizable Contact Forms, Survey, Quiz, & Conversational Form Builder: A security weakness
Fluent Forms – Customizable Contact Forms, Survey, Quiz, & Conversational Form Builder is affected by a security weakness. The vulnerable path is reachable without authentication. The resulting impact depends on how the affected component exposes the vulnerable operation. The published affected range is 6.1.21.
See mitigation notes
CVE5.3
NVDPending
Jan 07, 2026 CVE-2025-13722
Fluent Forms – Customizable Contact Forms, Survey, Quiz, & Conversational Form Builder: A security weakness
Fluent Forms – Customizable Contact Forms, Survey, Quiz, & Conversational Form Builder is affected by a security weakness. Exploitation requires at least subscriber-level access. The resulting impact depends on how the affected component exposes the vulnerable operation.
See mitigation notes
CVE5.3
NVDPending
Dec 06, 2025 CVE-2025-13748
Fluent Forms – Customizable Contact Forms, Survey, Quiz, & Conversational Form Builder: A security weakness
Fluent Forms – Customizable Contact Forms, Survey, Quiz, & Conversational Form Builder is affected by a security weakness. The vulnerable path is reachable without authentication. The resulting impact depends on how the affected component exposes the vulnerable operation.
See mitigation notes
CVE5.3
NVDPending
Mar 22, 2025 CVE-2024-13666
Fluent Forms – Customizable Contact Forms, Survey, Quiz, & Conversational Form Builder: A security weakness
Fluent Forms – Customizable Contact Forms, Survey, Quiz, & Conversational Form Builder is affected by a security weakness. The vulnerable path is reachable without authentication. The resulting impact depends on how the affected component exposes the vulnerable operation.
See mitigation notes
CVE5.3
NVDPending