Wpmanageninja
Wpmanageninja Fluent Support: vulnerabilidades y CVE
Wpmanageninja Fluent Support tiene 11 vulnerabilidades publicadas, 5 de ellas en los últimos 12 meses. 1 son críticas y 0 figuran en el catálogo de explotación activa de CISA.
CVE11
Últimos 12 meses5
Críticas1
Explotadas activamente0
Todas las vulnerabilidades en el catálogo →⭐ Seguir esta tecnología
Últimas vulnerabilidades
| CVE | Severidad | EPSS | Explotación activa | Publicada | Descripción |
|---|---|---|---|---|---|
| CVE-2026-94679 | Media (5.4) | 0.23% | — | 23 sept 2026 | Subscriber Broken Access Control in Fluent Support <= 2.3.2 versions. |
| CVE-2026-14197 | Baja (3.8) | 0.26% | — | 1 ago 2026 | The Fluent Support WordPress plugin before 2.3.1 does not perform a per-ticket access check before reassigning a ticket's customer, allowing a restricted support agent to change the assigned customer of any ticket in… |
| CVE-2026-15665 | Media (6.4) | 0.34% | — | 24 jul 2026 | The Fluent Support – Helpdesk & Customer Support Ticket System plugin for WordPress is vulnerable to Stored Cross-Site Scripting via 'redirect-to' Shortcode Attribute in all versions up to, and including, 2.3.0 due to… |
| CVE-2026-65470 | Media (6.5) | 0.22% | — | 23 jul 2026 | Contributor Cross Site Scripting (XSS) in Fluent Support <= 2.3.0 versions. |
| CVE-2025-67926 | Media (6.5) | 0.29% | — | 8 ene 2026 | Missing Authorization vulnerability in Shahjahan Jewel Fluent Support fluent-support allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Fluent Support: from n/a through <= 1.10.4. |
| CVE-2025-57885 | Media (4.3) | 0.13% | — | 22 ago 2025 | Cross-Site Request Forgery (CSRF) vulnerability in Shahjahan Jewel Fluent Support fluent-support allows Cross Site Request Forgery.This issue affects Fluent Support: from n/a through <= 1.9.1. |
| CVE-2024-13568 | Alta (7.5) | 0.43% | — | 1 mar 2025 | The Fluent Support – Helpdesk & Customer Support Ticket System plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 1.8.5 via the 'fluent-support' directory. This… |
| CVE-2024-47302 | Crítica (9.8) | 0.39% | — | 1 nov 2024 | Missing Authorization vulnerability in Shahjahan Jewel Fluent Support fluent-support allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Fluent Support: from n/a through <= 1.8.0. |
| CVE-2024-47304 | Alta (8.5) | 0.42% | — | 17 oct 2024 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Shahjahan Jewel Fluent Support fluent-support allows SQL Injection.This issue affects Fluent Support: from n/a… |
| CVE-2023-51547 | Alta (7.2) | 0.53% | — | 31 dic 2023 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in WPManageNinja LLC Fluent Support – WordPress Helpdesk and Customer Support Ticket Plugin.This issue affects Fluent… |
| CVE-2022-2559 | Alta (7.2) | 1.2% | — | 29 ago 2022 | The Fluent Support WordPress plugin before 1.5.8 does not properly sanitise, validate and escape various parameters before using them in an SQL statement, leading to an SQL Injection vulnerability exploitable by high… |
🎯 Cómo se explota (técnicas ATT&CK)
Número de CVE de esta tecnología asignadas a cada técnica de explotación o de impacto principal.