EUVD-2026-65579
GHSA-2c6v-2qqc-6c65
Severity by source
AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
Network-reachable via HTTP, low complexity SQL injection, requires Author-level authentication (PR:L), read-only data extraction yields high confidentiality but no integrity or availability impact.
Primary rating from Vendor (Wordfence).
CVSS VectorVendor: Wordfence
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
Lifecycle Timeline
2DescriptionCVE.org
The FluentCRM Pro - Email Newsletter, Automation, Email Marketing, Email Campaigns, Optins, Leads, and CRM Solution plugin for WordPress is vulnerable to SQL Injection in all versions up to, and including, 3.1.12 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. This makes it possible for authenticated attackers, with Author-level access and above, to append additional SQL queries into already existing queries that can be used to extract sensitive information from the database.
AnalysisAI
SQL injection in the FluentCRM Pro WordPress plugin (all versions up to and including 3.1.12) enables authenticated attackers holding Author-level access or higher to append arbitrary SQL to existing queries and extract sensitive data from the WordPress database. Reported by Wordfence, the flaw stems from unsanitized user-supplied parameters passed into unparameterized SQL queries. …
Unlock full vulnerability intelligence
- Risk assessment & exploitation conditions
- Attack chain visualization
- Remediation with exact patch versions
- Threat intelligence from 22 sources
- Personal watchlist & email alerts
Free forever · No credit card required
Attack ChainAIDerived
Hypothetical attack flow derived from CVE metadata
Vulnerability AssessmentAI
| Exploitation | Exploitation requires an active, authenticated WordPress session with Author-level role or higher on the target site - unauthenticated exploitation is not possible per the CVSS PR:L metric. … Additional conditions and limiting factors are described in the full assessment. |
| Risk Assessment | The CVSS 3.1 vector AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N scores 6.5 (Medium), accurately reflecting a network-reachable, low-complexity attack constrained by the requirement for Author-level WordPress credentials. … Full risk analysis with EPSS, KEV, and SSVC signal comparison available after sign-in. |
| Exploit Scenario | An attacker who has obtained or registered a WordPress Author account - for example through a guest-post program or a compromised contributor credential - crafts a malicious value in a FluentCRM Pro plugin parameter that appends a UNION-based or time-based SQL subquery. The injected query runs in the context of the WordPress database user, allowing the attacker to enumerate tables and dump sensitive records such as subscriber email addresses, CRM contact data, or hashed user passwords from wp_users. … |
| Remediation | No exact fixed version number was confirmed in the available input data; the Wordfence advisory and the vendor site at https://fluentcrm.com/ should be consulted immediately for a patched release above 3.1.12. … Detailed patch versions, workarounds, and compensating controls in full report. |
Threat intelligence, references, and detailed analysis are available after sign-in.
Same weakness CWE-89 – SQL Injection
View allShare
External POC / Exploit Code
Leaving vuln.today