techjewel Vulnerabilities and Affected Products
Vulnerabilities associated with Fluent Support – Helpdesk & Customer Support Ticket System.
Products
Clear product- Fluent Forms – Customizable Contact Forms, Survey, Quiz, & Conversational Form Builder25 vulnerabilities
- Fluent Forms Pro Add On Pack5 vulnerabilities
- Ninja Tables – Easy Data Table Builder4 vulnerabilities
- FluentCRM – Email Newsletter, Automation, Email Marketing, Email Campaigns, Optins, Leads, and CRM Solution3 vulnerabilities
- Fluent Booking – The Ultimate Appointments Scheduling, Events Booking, Events Calendar Solution2 vulnerabilities
- FluentSMTP – WP SMTP Plugin with Amazon SES, SendGrid, MailGun, Postmark, Google and Any SMTP Provider2 vulnerabilities
- Fluent Support – Helpdesk & Customer Support Ticket System1 vulnerability
- FluentAuth – The Ultimate Authorization & Security Plugin for WordPress1 vulnerability
- WP GDPR Cookie Consent1 vulnerability
| Vulnerability | Title and context | CVSS | EPSS | PoCs | Signals | STIX action |
|---|---|---|---|---|---|---|
CVE-2024-13568HIGH | Fluent Support – Helpdesk & Customer Support Ticket System <= 1.8.5 - Unauthenticated Sensitive Information Exposure Through Unprotected DirectoryThe Fluent Support – Helpdesk & Customer Support Ticket System plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 1.8.5 via the 'fluent-support' directory. This makes it possible for unauthenticated attackers to extract sensitive data stored insecurely in the /wp-content/uploads/fluent-support directory which can contain file attachments included in support tickets. CWE-200Mar 1, 2025 | CVSS7.5v3.1 | EPSS0.416% | PoCs0 | SignalsNot listed in CISA KEVNo known ransomware useNo Nuclei templates | STIX |