Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1336 CNY

100%
Buy Us a Coffee

FluentCRM – Email Newsletter, Automation, Email Marketing, Email Campaigns, Optins, Leads, and CRM Solution — Vulnerabilities & Security Advisories 3

All 3 CVE vulnerabilities found in FluentCRM – Email Newsletter, Automation, Email Marketing, Email Campaigns, Optins, Leads, and CRM Solution, with AI-generated Chinese analysis, references, and POCs.

Vendor: techjewel

CVE IDTitleCVSSSeverityPublished
CVE-2026-7798 FluentCRM <= 2.9.87 - Unauthenticated Blind Server-Side Request Forgery via 'SubscribeURL' Parameter CWE-918 5.4 Medium2026-05-22
CVE-2025-12935 FluentCRM - Marketing Automation For WordPress <= 2.9.84 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'fluentcrm_content' Shortcode CWE-79 6.4 Medium2025-11-21
CVE-2023-1430 FluentCRM - Marketing Automation For WordPress <= 2.8.01 - Insufficient Use of Hash as Authorization Control CWE-759 6.5 Medium2023-06-09

All 3 known CVE vulnerabilities affecting FluentCRM – Email Newsletter, Automation, Email Marketing, Email Campaigns, Optins, Leads, and CRM Solution with full Chinese analysis, references, and POCs where available.