Fluent Forms <= 6.2.8 IDOR及弱哈希导致未授权敏感信息泄露分析

漏洞概述 漏洞名称: Fluent Forms <= 6.2.8 - Unauthenticated Sensitive Information Exposure via Insecure Direct Object Reference and Weak Transaction Hash in 'transaction' Parameter CVE ID: CVE-2026-17567 CVSS评分: 5.3 (Medium) 发布日期: July 30, 2026 最后更新: July 31, 2026 研究者: ChintNguyen 影响范围 软件类型: Plugin 软件名称: Fluent Forms - Customizable Contact Forms, Survey, Quiz, & Conversational Form Builder 受影响版本: <= 6.2.8 修复版本: 6.2.9 修复方案 修复建议: 更新到版本 6.2.9 或更新的已修补版本。 漏洞描述 Fluent Forms 插件在 6.2.8 及更早版本中存在不安全直接对象引用（IDOR）和弱事务哈希问题。攻击者可以通过暴力破解有效的交易哈希，获取敏感支付收据数据，包括客户姓名、电子邮件地址、账单地址、订单项目、付款方式、付款状态等。由于提交 ID、表单 ID 和交易创建时间可观察或可猜测，攻击者每秒可尝试约 900 个组合，使得利用变得实际可行，无需任何身份验证或账户。 参考链接 plugins.trac.wordpress.org 其他信息 分享选项: Facebook, Twitter, LinkedIn, Email 近期漏洞 Fluent Forms <= 6.2.8 - Reflected Cross-Site Scripting via 'param': CVE-2026-17571, CVSS 6.1, 研究者 Osvaldo Nore Gonzalez Del Rio (Os), 日期 July 31, 2026 Fluent Forms <= 6.2.7 - Unauthenticated Stored Cross-Site Scripting via Name Field Nested 'password' Member: CVE-2026-16655, CVSS 7.2, 研究者 daroo, 日期 July 28, 2026 Fluent Forms <= 6.2.1 - Incorrect Authorization to Authenticated (Subscriber+) Arbitrary Subscription Cancellation via 'subscription_id': CVE-2026-5059, CVSS 5.4, 研究者 Fernando Mecozzi, 日期 July 9, 2026 Fluent Forms <= 6.2.0 - Authenticated (Subscriber+) Authorization Bypass via 'table' Parameter: CVE-2026-5395, CVSS 8.2, 研究者 Sander Horstman, 日期 May 13, 2026 Fluent Forms <= 6.1.21 - Authenticated (Subscriber+) Authorization Bypass via 'form_id' Parameter: CVE-2026-5396, CVSS 8.2, 研究者 Sander Horstman, 日期 May 13, 2026 Fluent Forms <= 6.2.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'permission_message' Shortcode Attribute: CVE-2026-6828, CVSS 6.4, 研究者 zaim, 日期 May 12, 2026 Fluent Forms <= 6.2.1 - Authenticated (Administrator+) Arbitrary File Read via Path Traversal in 'message' Shortcode Attribute: CVE-2026-6344, CVSS 4.9, 研究者 Niv Kochan, 日期 May 5, 2026 Fluent Forms - Customizable Contact Forms, Survey, Quiz, & Conversational Form Builder <= 6.1.21 - Insecure Direct Object Reference in Stripe SCA Confirmation to Unauthenticated Payment Status Modification: CVE-2026-4160, CVSS 5.3, 研究者 Prickly Cactus, 日期 April 16, 2026 Fluent Forms <= 6.1.14 - Authenticated (Subscriber+) Stored Cross-Site Scripting via AI Form Builder Module: CVE-2026-0996, CVSS 6.4, 研究者 Osvaldo Nore Gonzalez Del Rio (Os), 日期 February 9, 2026 Fluent Forms - Customizable Contact Forms, Survey, Quiz, & Conversational Form Builder <= 6.1.14 - Missing Authorization: CVE-2026-25313, CVSS 4.3, 研究者 benzleus, 日期 January 25, 2026 其他信息 版权信息: - Copyright 2012-2026 Defiant Inc. - Copyright 1999-2026 The MITRE Corporation 联系信息: - 业务时间: 9am-8pm ET, 6am-5pm PT 和 2pm-1am UTC/GMT（不包括周末和节假日） - 响应时间: 24小时支持，365天/年，1小时响应时间 社交媒体: - Twitter, Facebook, LinkedIn, Instagram 产品与服务: - Wordfence Free, Wordfence Premium, Wordfence Care, Wordfence Response, Wordfence CLI, Wordfence Intelligence, Wordfence Central 支持与服务: - Documentation, Learning Center, Free Support, Premium Support 新闻与动态: - Blog, In The News, Vulnerability Advisories 关于: - About Wordfence, Affiliate Program, Employment, Contact, Security, CVE Request Form 订阅: - 输入邮箱地址订阅新闻和更新 法律声明: - Terms of Service, Privacy Policy and Notice at Collection, Do Not Sell or Share My Personal Information 技术支持: - Have you been hacked? Get Help - Create Account, Sign In 定价: - View Pricing 其他: - © 2012-2026 Defiant Inc. All Rights Reserved - Created by Wordfence

目标达成感谢每一位支持者 — 我们达成了 100% 目标！

Fluent Forms <= 6.2.8 IDOR及弱哈希导致未授权敏感信息泄露分析

同源更多文章

目标达成 感谢每一位支持者 — 我们达成了 100% 目标！

Fluent Forms <= 6.2.8 IDOR及弱哈希导致未授权敏感信息泄露分析

同源更多文章

目标达成感谢每一位支持者 — 我们达成了 100% 目标！