株式会社mgn@mgn_jpn
🛠 Fluent Forms の脆弱性が修正されました（深刻度 中） 70万サイト以上が利用 / CVSS 5.4 6.2.6 に更新してください https://shindan.m-g-n.me/alerts/cve-2026-15178/
00000100
396 followersView on X
CVE-2026-15178
LOWCVSS 5.4 · MEDIUMSignal is active with 1 mentions in latest observed window
Immediate actions
- Track advisory updates for patch or workaround availability
Recommended action window: Monitor and triage in normal cycle
NVD description
The Fluent Forms plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 6.2.5. This is due to the plugin not properly verifying that a user is authorized to perform an action. This makes it possible for authenticated attackers, with Custom-level access and above, to read private form submissions, change submission statuses, permanently delete submissions, and modify global plugin settings.
0.0/ 10 priority
Sources & remediation
Other references
Weakness type (CWE)
CWE-862
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
NONE
Momentum
NONE
Threat summary
- 1 mentions across 1 observed day
What's happening
- 1 total mentions across 1 day
Deep dive
Activity timeline1 mentions / 1d
Referenced assets1 URL
By indicator