Skip to content
OpenAdvisories
Medium · 5.5 CVE-2023-24410 EUVD-2023-28466GHSA-3xwq-m4f9-jf8w

WordPress FluentForm Plugin <= 4.3.25 is vulnerable to SQL Injection

Published Oct 31, 2023 · Updated Apr 29, 2026 · Assigned by Patchstack

Vendor: Contact Form - WPManageNinja Product: Contact Form Plugin – Fastest Contact Form Builder Plugin for WordPress by Fluent Forms Category: Web / CMS

Description

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Contact Form - WPManageNinja LLC Contact Form Plugin – Fastest Contact Form Builder Plugin for WordPress by Fluent Forms fluentform allows SQL Injection.This issue affects Contact Form Plugin – Fastest Contact Form Builder Plugin for WordPress by Fluent Forms: from n/a through 4.3.25.

Affected products

VendorProductAffectedFixed
Contact Form - WPManageNinja Contact Form Plugin – Fastest Contact Form Builder Plugin for WordPress by Fluent Forms ≤ 4.3.25 —

References