FluentCRM – Email Newsletter, Automation, Email Marketing, Email Campaigns, Optins, Leads, and CRM Solution vulnerabilities

Product

FluentCRM – Email Newsletter, Automation, Email Marketing, Email Campaigns, Optins, Leads, and CRM Solution

by techjewel · last CVE May 22, 2026

CVEs

On KEV

6.5

Max CVSS

New 30D

Vulnerabilities3 In the news0 Timeline

Severity mix

Critical 0High 0Medium 3Low 0

Severity

All severities3 Critical0 High0 Medium3 Low0

Exploitation

On CISA KEV0 Exploited in the wild0

Watch

Add FluentCRM – Email Newsletter, Automation, Email Marketing, Email Campaigns, Optins, Leads, and CRM Solution to your stack to get only the CVEs that touch what you run.

CVE	CVSS	EPSS	Published	Summary · affected versions
CVE-2023-1430	6.5	1%	Jun 9	FluentCRM - Marketing Automation For WordPress <= 2.8.01 - Insufficient Use of Hash as Authorization Control Affected: through 2.8.0.1
CVE-2025-12935	6.4	0%	Nov 21	FluentCRM - Marketing Automation For WordPress <= 2.9.84 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'fluentcrm_content' Shortcode Affected: through 2.9.84
CVE-2026-7798	5.4	1%	May 22	FluentCRM <= 2.9.87 - Unauthenticated Blind Server-Side Request Forgery via 'SubscribeURL' Parameter Affected: through 2.9.87