← CVE Intelligence

CVE-2026-11880

Fluent Forms < 6.2.1 - Subscriber+ Subscription Cancellation via IDOR PUBLISHED

Description (CNA)

The Fluent Forms WordPress plugin before 6.2.1 does not properly verify ownership before processing a subscription cancellation request, allowing authenticated users with a low-privilege account to cancel subscriptions belonging to other users.

Affected (CNA)

Vendor / productVersions
Unknown / Fluent Formsaffected 0 before 6.2.1

CWE

No CWE identifiers supplied.

References

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.