All 3 CVE vulnerabilities found in FluentCRM – Email Newsletter, Automation, Email Marketing, Email Campaigns, Optins, Leads, and CRM Solution, with AI-generated Chinese analysis, references, and POCs.
Vendor: techjewel
| CVE ID | Title | CVSS | Severity | Published |
|---|---|---|---|---|
| CVE-2026-7798 | FluentCRM <= 2.9.87 - Unauthenticated Blind Server-Side Request Forgery via 'SubscribeURL' Parameter CWE-918 | 5.4 | Medium | 2026-05-22 |
| CVE-2025-12935 | FluentCRM - Marketing Automation For WordPress <= 2.9.84 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'fluentcrm_content' Shortcode CWE-79 | 6.4 | Medium | 2025-11-21 |
| CVE-2023-1430 | FluentCRM - Marketing Automation For WordPress <= 2.8.01 - Insufficient Use of Hash as Authorization Control CWE-759 | 6.5 | Medium | 2023-06-09 |
All 3 known CVE vulnerabilities affecting FluentCRM – Email Newsletter, Automation, Email Marketing, Email Campaigns, Optins, Leads, and CRM Solution with full Chinese analysis, references, and POCs where available.