Critical

DATE	CVE	VULNERABILITY TITLE	RISK
2023-10-31	CVE-2023-24410	Unspecified vulnerability in Fluentforms Contact Form Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Contact Form - WPManageNinja LLC Contact Form Plugin – Fastest Contact Form Builder Plugin for WordPress by Fluent Forms fluentform allows SQL Injection.This issue affects Contact Form Plugin – Fastest Contact Form Builder Plugin for WordPress by Fluent Forms: from n/a through 4.3.25. network low complexity fluentforms critical	9.8
2022-11-07	CVE-2022-3463	Unspecified vulnerability in Fluentforms Contact Form The Contact Form Plugin WordPress plugin before 4.3.13 does not validate and escape fields when exporting form entries as CSV, leading to a CSV injection network low complexity fluentforms critical	9.8