Security Advisory

CVE-2026-11880

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2026-07-01 06:00:02

Last updated 2026-07-01 10:17:33

Assigner WPScan

CVSS score not scored

State PUBLISHED

Description

The Fluent Forms WordPress plugin before 6.2.1 does not properly verify ownership before processing a subscription cancellation request, allowing authenticated users with a low-privilege account to cancel subscriptions belonging to other users.

← Browse all CVEs View on cve.org ↗