# WP ManageNinja LLC vulnerabilities Source: https://junglewise.ai/threats/vendors/wp-manageninja-llc Publisher: Junglewise Threat Intelligence, https://junglewise.ai/threats Updated: 13 November 2026, 03:07 UTC. Rebuilt every hour. Data: https://junglewise.ai/threats/vendors/wp-manageninja-llc.json License: CC BY 4.0 with a link back Junglewise Threat Intelligence has tracked 25 vulnerabilities in WP ManageNinja LLC: 4 in the last 7 days and 25 in the last 90 days, 1 of them critical and 0 exploited in the wild. The most recent, CVE-2026-120858, was published on 8 November 2026. 10 vulnerabilities in the last four weeks, up 25% on the four before (8). 1 critical against 0. 3 technologies have a page of their own. ## Counts - Last 7 days: 4 - Last 30 days: 9 - Last 90 days: 25 - All time: 25 (1 critical, 0 exploited in the wild) ## Latest WP ManageNinja LLC vulnerabilities - [CVE-2026-120858: FluentForm missing authorization in access control](https://junglewise.ai/threats/cve-2026-120858-missing-authorization-vulnerability-in-wp-manageninja-llc) (medium, CVSS 6.5, published 8 Nov 2026) - [CVE-2026-122659: WP ManageNinja Fluent Booking broken access control](https://junglewise.ai/threats/cve-2026-122659-missing-authorization-vulnerability-in-wp-manageninja-llc-fluent) (medium, CVSS 5.4, published 7 Nov 2026) - [CVE-2026-119486: WP ManageNinja FluentBoards access control bypass](https://junglewise.ai/threats/cve-2026-119486-missing-authorization-vulnerability-in-wp-manageninja-llc) (medium, CVSS 4.3, published 7 Nov 2026) - [CVE-2026-121781: WP ManageNinja Fluent Booking broken access control](https://junglewise.ai/threats/cve-2026-121781-missing-authorization-vulnerability-in-wp-manageninja-llc-fluent) (medium, CVSS 5.3, published 7 Nov 2026) - [CVE-2026-62056: Fluent CRM missing authorization in access control](https://junglewise.ai/threats/cve-2026-62056-missing-authorization-vulnerability-in-wp-manageninja-llc-fluent) (medium, CVSS 5.3, published 30 Oct 2026) - [CVE-2026-62141: WP ManageNinja Fluent CRM broken access control in authorization](https://junglewise.ai/threats/cve-2026-62141-missing-authorization-vulnerability-in-wp-manageninja-llc-fluent) (medium, CVSS 5.4, published 30 Oct 2026) - [CVE-2026-111836: WP ManageNinja FluentCommunity access control bypass](https://junglewise.ai/threats/cve-2026-111836-missing-authorization-vulnerability-in-wp-manageninja-llc) (medium, CVSS 4.3, published 19 Oct 2026) - [CVE-2026-111831: WP ManageNinja FluentForm broken access control in form handling](https://junglewise.ai/threats/cve-2026-111831-missing-authorization-vulnerability-in-wp-manageninja-llc) (medium, CVSS 5.3, published 19 Oct 2026) - [CVE-2026-109694: WP ManageNinja Fluent CRM privilege escalation](https://junglewise.ai/threats/cve-2026-109694-incorrect-privilege-assignment-vulnerability-in-wp-manageninja) (critical, CVSS 9.8, published 15 Oct 2026) - [CVE-2026-109696: WP ManageNinja FluentBoards access control bypass](https://junglewise.ai/threats/cve-2026-109696-missing-authorization-vulnerability-in-wp-manageninja-llc) (medium, CVSS 5.4, published 13 Oct 2026) - [CVE-2026-94675: Fluent Forms Pro Add On Pack Cross Site Scripting (XSS)](https://junglewise.ai/threats/cve-2026-94675-unauthenticated-cross-site-scripting-xss-in-fluent-forms-pro-add) (high, CVSS 7.1, published 6 Oct 2026) - [CVE-2026-39789: Fluent Affiliate Pro broken access control](https://junglewise.ai/threats/cve-2026-39789-unauthenticated-broken-access-control-in-fluent-affiliate-pro-1-6) (high, CVSS 7.5, published 6 Oct 2026) - [CVE-2026-105072: FluentBooking Pro broken access control vulnerability](https://junglewise.ai/threats/cve-2026-105072-unauthenticated-broken-access-control-in-fluentbooking-pro-2-5-0) (high, CVSS 7.5, published 6 Oct 2026) - [CVE-2026-94669: Fluent Forms Pro Add On Pack broken access control](https://junglewise.ai/threats/cve-2026-94669-missing-authorization-vulnerability-in-wp-manageninja-llc-fluent) (medium, CVSS 5.3, published 5 Oct 2026) - [CVE-2026-103343: WP ManageNinja FluentForm stored cross-site scripting](https://junglewise.ai/threats/cve-2026-103343-improper-neutralization-of-input-during-web-page-generation) (medium, CVSS 6.5, published 1 Oct 2026) - [CVE-2026-103353: WP ManageNinja FluentForm broken access control in form handling](https://junglewise.ai/threats/cve-2026-103353-incorrect-behavior-order-vulnerability-in-wp-manageninja-llc) (medium, CVSS 5.3, published 1 Oct 2026) - [CVE-2026-94679: Fluent Support broken access control in subscriber management](https://junglewise.ai/threats/cve-2026-94679-subscriber-broken-access-control-in-fluent-support-2-3-2-versions) (medium, CVSS 5.4, published 23 Sep 2026) - [CVE-2026-78296: WP ManageNinja FluentAuth insufficient verification of data authenticity](https://junglewise.ai/threats/cve-2026-78296-wp-manageninja-fluentauth-insufficient-verification-of-data) (medium, CVSS 5.3, published 17 Sep 2026) - [CVE-2026-84766: WordPress FluentBooking Pro authentication bypass](https://junglewise.ai/threats/cve-2026-84766-wordpress-fluentbooking-pro-authentication-bypass) (medium, CVSS 5.9, published 3 Sep 2026) - [CVE-2026-81273: FluentBooking Pro unauthenticated cross-site request forgery](https://junglewise.ai/threats/cve-2026-81273-fluentbooking-pro-unauthenticated-cross-site-request-forgery) (high, CVSS 8.1, published 27 Aug 2026) - [CVE-2026-78271: WP ManageNinja FluentCRM Pro privilege escalation in editor role](https://junglewise.ai/threats/cve-2026-78271-wp-manageninja-fluentcrm-pro-privilege-escalation-in-editor-role) (high, CVSS 7.2, published 27 Aug 2026) - [CVE-2026-78279: Fluent Support Pro unauthenticated cross-site request forgery](https://junglewise.ai/threats/cve-2026-78279-fluent-support-pro-unauthenticated-cross-site-request-forgery) (medium, CVSS 5.4, published 24 Aug 2026) - [CVE-2026-78277: FluentCRM Pro subscriber SSRF vulnerability](https://junglewise.ai/threats/cve-2026-78277-fluentcrm-pro-subscriber-ssrf-vulnerability) (medium, CVSS 4.9, published 24 Aug 2026) - [CVE-2026-78272: Fluent Support Pro broken access control vulnerability](https://junglewise.ai/threats/cve-2026-78272-fluent-support-pro-broken-access-control-vulnerability) (medium, CVSS 5.4, published 24 Aug 2026) - [CVE-2026-66633: Fluent Forms Pro Add On Pack unauthenticated cross-site scripting](https://junglewise.ai/threats/cve-2026-66633-fluent-forms-pro-add-on-pack-unauthenticated-cross-site-scripting) (high, CVSS 7.1, published 18 Aug 2026) ## Most severe WP ManageNinja LLC vulnerabilities - [CVE-2026-109694: WP ManageNinja Fluent CRM privilege escalation](https://junglewise.ai/threats/cve-2026-109694-incorrect-privilege-assignment-vulnerability-in-wp-manageninja) (critical, CVSS 9.8, published 15 Oct 2026) - [CVE-2026-81273: FluentBooking Pro unauthenticated cross-site request forgery](https://junglewise.ai/threats/cve-2026-81273-fluentbooking-pro-unauthenticated-cross-site-request-forgery) (high, CVSS 8.1, published 27 Aug 2026) - [CVE-2026-39789: Fluent Affiliate Pro broken access control](https://junglewise.ai/threats/cve-2026-39789-unauthenticated-broken-access-control-in-fluent-affiliate-pro-1-6) (high, CVSS 7.5, published 6 Oct 2026) - [CVE-2026-105072: FluentBooking Pro broken access control vulnerability](https://junglewise.ai/threats/cve-2026-105072-unauthenticated-broken-access-control-in-fluentbooking-pro-2-5-0) (high, CVSS 7.5, published 6 Oct 2026) - [CVE-2026-78271: WP ManageNinja FluentCRM Pro privilege escalation in editor role](https://junglewise.ai/threats/cve-2026-78271-wp-manageninja-fluentcrm-pro-privilege-escalation-in-editor-role) (high, CVSS 7.2, published 27 Aug 2026) - [CVE-2026-66633: Fluent Forms Pro Add On Pack unauthenticated cross-site scripting](https://junglewise.ai/threats/cve-2026-66633-fluent-forms-pro-add-on-pack-unauthenticated-cross-site-scripting) (high, CVSS 7.1, published 18 Aug 2026) - [CVE-2026-94675: Fluent Forms Pro Add On Pack Cross Site Scripting (XSS)](https://junglewise.ai/threats/cve-2026-94675-unauthenticated-cross-site-scripting-xss-in-fluent-forms-pro-add) (high, CVSS 7.1, published 6 Oct 2026) - [CVE-2026-103343: WP ManageNinja FluentForm stored cross-site scripting](https://junglewise.ai/threats/cve-2026-103343-improper-neutralization-of-input-during-web-page-generation) (medium, CVSS 6.5, published 1 Oct 2026) - [CVE-2026-120858: FluentForm missing authorization in access control](https://junglewise.ai/threats/cve-2026-120858-missing-authorization-vulnerability-in-wp-manageninja-llc) (medium, CVSS 6.5, published 8 Nov 2026) - [CVE-2026-84766: WordPress FluentBooking Pro authentication bypass](https://junglewise.ai/threats/cve-2026-84766-wordpress-fluentbooking-pro-authentication-bypass) (medium, CVSS 5.9, published 3 Sep 2026) ## Vulnerabilities per week 10 vulnerabilities in the last four weeks, up 25% on the four before (8). 1 critical against 0. | Week of | Vulns | Critical | Exploited | | --- | --- | --- | --- | | 17 Aug 2026 | 1 | 0 | 0 | | 24 Aug 2026 | 5 | 0 | 0 | | 31 Aug 2026 | 1 | 0 | 0 | | 7 Sep 2026 | 0 | 0 | 0 | | 14 Sep 2026 | 1 | 0 | 0 | | 21 Sep 2026 | 1 | 0 | 0 | | 28 Sep 2026 | 2 | 0 | 0 | | 5 Oct 2026 | 4 | 0 | 0 | | 12 Oct 2026 | 2 | 1 | 0 | | 19 Oct 2026 | 2 | 0 | 0 | | 26 Oct 2026 | 2 | 0 | 0 | | 2 Nov 2026 | 4 | 0 | 0 | | 9 Nov 2026 | 0 | 0 | 0 | ## WP ManageNinja LLC technologies - [WP ManageNinja LLC FluentForm](https://junglewise.ai/threats/technologies/fluentform): 4 vulnerabilities - [WP ManageNinja LLC FluentBooking Pro](https://junglewise.ai/threats/technologies/fluentbooking-pro): 3 vulnerabilities - [WP ManageNinja LLC Fluent CRM](https://junglewise.ai/threats/technologies/wp-manageninja-llc-fluent-crm): 3 vulnerabilities ## Sources NVD, GitHub Security Advisories, OSV, the CISA Known Exploited Vulnerabilities catalog, FIRST EPSS and vendor advisories. Rebuilt every hour. Cite as: Junglewise Threat Intelligence, "WP ManageNinja LLC vulnerabilities", https://junglewise.ai/threats/vendors/wp-manageninja-llc, 13 November 2026.