low3.1
CVE-2026-11880
The Fluent Forms WordPress plugin before 6.2.1 does not properly verify ownership before processing a subscription cancellation request, allowing authenticated…
Impact
The Fluent Forms WordPress plugin before 6.2.1 does not properly verify ownership before processing a subscription cancellation request, allowing authenticated users with a low-privilege account to cancel subscriptions belonging to other users.
Affected products
| Product | Affected versions |
|---|---|
| Fluent Forms WordPress Plugin | before 6.2.1 |
Versions were read from the advisory text. No structured product data has been published for this record yet.