PRODUCT PROFILE

fluent-crm

Created from vulnerability 18023 relation agent

wordpress

关联漏洞

共找到 1 条公开漏洞记录

中危CVE-2026-77982026/06/25

WordPress FluentCRM <= 2.9.87 - Unauthenticated Blind SSRF

FluentCRM WordPress plugin <= 2.9.87 contains a blind server-side request forgery caused by improper validation of the 'SubscribeURL' parameter, letting unauthenticated attackers make arbitrary web requests, exploit requires unconfigured SES bounce handling key.

fluent-crmPoC 已收录

CVSS—