https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-14T19:19:46.902933+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cve-2026-11880 CVE-2026-11880 — Fluent Forms < 6.2.1 - Subscriber+ Subscription Cancellation via IDOR 2026-10-14T19:19:46.922924+00:00

Affected: Unknown Fluent Forms

The Fluent Forms WordPress plugin before 6.2.1 does not properly verify ownership before processing a subscription cancellation request, allowing authenticated users with a low-privilege account to cancel subscriptions belonging to other users.