Skip to content
OpenAdvisories
High · 7.5 CVE-2026-110383 EUVD-2026-103426GHSA-pjjv-c28j-37gf

WordPress Electronic Signature Add-on for Fluent Forms plugin <= 2.0.5 - Insecure Direct Object References (IDOR) vulnerability

Published Oct 18, 2026 · Updated Oct 18, 2026 · Assigned by Patchstack

Description

Authorization Bypass Through User-Controlled Key vulnerability in WP E-Signature Electronic Signature Add-on for Fluent Forms signature-fluent-contract-forms-add-on allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Electronic Signature Add-on for Fluent Forms: from n/a through 2.0.5.

Affected products

VendorProductAffectedFixed
WP E-Signature Electronic Signature Add-on for Fluent Forms ≤ 2.0.5 —

References