Fluent Support – Helpdesk & Customer Support Ticket System

Wordfence Intelligence   >   Vulnerability Database   >   WordPress Plugins   >   Fluent Support – Helpdesk & Customer Support Ticket System

Information

Software Type Plugin
Software Slug fluent-support (view on wordpress.org)
Software Status Active
Software Author wpmanageninja
Software Website fluentsupport.com
Software Downloads 301,799
Software Active Installs 10,000
Software Record Last Updated August 12, 2026

9 Vulnerabilities

Submit a Vulnerability
Fluent Support <= 2.3.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'redirect-to' Shortcode Attribute
6.4
CVE-2026-15665
Jul 23, 2026
Researcher: Wordfence PRISM
Fluent Support – Helpdesk & Customer Support Ticket System <= 2.3.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
6.4
CVE-2026-65470
Jul 22, 2026
Researcher: Ananda Dhakal
Fluent Support <= 1.10.4 - Missing Authorization
4.3
CVE-2025-67926
Jan 5, 2026
Researcher: daroo
Fluent Support <= 1.9.1 - Cross-Site Request Forgery
4.3
CVE-2025-57885
Aug 22, 2025
Researcher: Bao - BlueRock
Fluent Support – Helpdesk & Customer Support Ticket System <= 1.8.5 - Unauthenticated Sensitive Information Exposure Through Unprotected Directory
7.5
CVE-2024-13568
Feb 28, 2025
Researcher: Tim Coen
Fluent Support <= 1.8.0 - Authenticated (Subscriber+) SQL Injection
6.5
CVE-2024-47304
Sep 25, 2024
Researcher: Khalid Yusuf
Fluent Support <= 1.8.0 - Insufficient Authorization on Email Verification
5.3
CVE-2024-47302
Sep 25, 2024
Researcher: Khalid Yusuf
Fluent Support <= 1.7.6 - Authenticated(Administrator+) SQL Injection
6.6
CVE-2023-51547
Dec 27, 2023
Researcher: beluga
Fluent Support <= 1.5.7 - Authenticated (Administrator+) SQL Injection
7.2
CVE-2022-2559
Aug 2, 2022
Researcher: Rafshanzani Suhada
Title Status CVE ID CVSS Researchers Date
Fluent Support <= 2.3.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'redirect-to' Shortcode Attribute Patched CVE-2026-15665 6.4 Wordfence PRISM July 23, 2026
Fluent Support – Helpdesk & Customer Support Ticket System <= 2.3.0 - Authenticated (Contributor+) Stored Cross-Site Scripting Patched CVE-2026-65470 6.4 Ananda Dhakal July 22, 2026
Fluent Support <= 1.10.4 - Missing Authorization Patched CVE-2025-67926 4.3 daroo January 5, 2026
Fluent Support <= 1.9.1 - Cross-Site Request Forgery Patched CVE-2025-57885 4.3 Bao - BlueRock August 22, 2025
Fluent Support – Helpdesk & Customer Support Ticket System <= 1.8.5 - Unauthenticated Sensitive Information Exposure Through Unprotected Directory Patched CVE-2024-13568 7.5 Tim Coen February 28, 2025
Fluent Support <= 1.8.0 - Authenticated (Subscriber+) SQL Injection Patched CVE-2024-47304 6.5 Khalid Yusuf September 25, 2024
Fluent Support <= 1.8.0 - Insufficient Authorization on Email Verification Patched CVE-2024-47302 5.3 Khalid Yusuf September 25, 2024
Fluent Support <= 1.7.6 - Authenticated(Administrator+) SQL Injection Patched CVE-2023-51547 6.6 beluga December 27, 2023
Fluent Support <= 1.5.7 - Authenticated (Administrator+) SQL Injection Patched CVE-2022-2559 7.2 Rafshanzani Suhada August 2, 2022

Did you know Wordfence Intelligence provides free personal and commercial API access to our comprehensive WordPress vulnerability database, along with a free webhook integration to stay on top of the latest vulnerabilities added and updated in the database? Get started today!

Learn more

Want to get notified of the latest vulnerabilities that may affect your WordPress site?
Install Wordfence on your site today to get notified immediately if your site is affected by a vulnerability that has been added to our database.

Get Wordfence

The Wordfence Intelligence WordPress vulnerability database is completely free to access and query via API. Please review the documentation on how to access and consume the vulnerability data via API.

Documentation