Shahjahan Jewel vulnerabilities and threats

16 threats

Severity	CVSS	Signals	Threat	Source	Published
Medium	4.3	EPSS 0.2%	CVE-2026-25313FluentForm (WordPress plugin) · Missing Authorization Medium4.3EPSS 0.2%2026-02-19CVE Database V5CVE-2026-25313 Missing Authorization vulnerability in Shahjahan Jewel FluentForm fluentform allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects FluentForm: from n/a through <= 6.1.14. EPSS 0.2%Vulnerability Shahjahan Jewel	CVE Database V5	2026-02-19
Medium	4.3	EPSS 0.2%	CVE-2026-25008Ninja Tables (WordPress plugin) · Insertion of Sensitive Information Into Sent Data Medium4.3EPSS 0.2%2026-02-19CVE Database V5CVE-2026-25008 Insertion of Sensitive Information Into Sent Data vulnerability in Shahjahan Jewel Ninja Tables ninja-tables allows Retrieve Embedded Sensitive Data.This issue affects Ninja Tables: from n/a through <= 5.2.5. EPSS 0.2%Vulnerability Shahjahan Jewel	CVE Database V5	2026-02-19
Medium	5.3	EPSS 0.3%	CVE-2025-69001FluentForm (WordPress plugin) · Code Injection Medium5.3EPSS 0.3%2026-01-22CVE Database V5CVE-2025-69001 Improper Control of Generation of Code ('Code Injection') vulnerability in Shahjahan Jewel FluentForm fluentform allows Code Injection.This issue affects FluentForm: from n/a through <= 6.1.11. EPSS 0.3%Vulnerability Shahjahan Jewel	CVE Database V5	2026-01-22
Medium	6.5	EPSS 0.3%	CVE-2025-67926Fluent Support (WordPress plugin) · Missing Authorization Medium6.5EPSS 0.3%2026-01-08CVE Database V5CVE-2025-67926 Missing Authorization vulnerability in Shahjahan Jewel Fluent Support fluent-support allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Fluent Support: from n/a through <= 1.10.4. EPSS 0.3%Vulnerability Shahjahan Jewel	CVE Database V5	2026-01-08
High	8.5	EPSS 0.2%	CVE-2025-69351Ninja Tables (WordPress plugin) · SQL Injection High8.5EPSS 0.2%2026-01-06CVE Database V5CVE-2025-69351 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Shahjahan Jewel Ninja Tables ninja-tables allows Blind SQL Injection.This issue affects Ninja Tables: from n/a through <= 5.2.4. EPSS 0.2%Vulnerability Shahjahan Jewel	CVE Database V5	2026-01-06
Medium	4.3	EPSS 0.2%	CVE-2025-67597Fluent Booking (WordPress plugin) · Missing Authorization Medium4.3EPSS 0.2%2025-12-09CVE Database V5CVE-2025-67597 Missing Authorization vulnerability in Shahjahan Jewel Fluent Booking fluent-booking allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Fluent Booking: from n/a through <= 1.9.11. EPSS 0.2%Vulnerability Shahjahan Jewel CWE-862	CVE Database V5	2025-12-09
High	7.6	EPSS 0.4%	CVE-2025-67519Ninja Tables (WordPress plugin) · SQL Injection High7.6EPSS 0.4%2025-12-09CVE Database V5CVE-2025-67519 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Shahjahan Jewel Ninja Tables ninja-tables allows SQL Injection.This issue affects Ninja Tables: from n/a through <= 5.2.3. EPSS 0.4%Vulnerability Shahjahan Jewel CWE-89	CVE Database V5	2025-12-09
Medium	4.3	EPSS 0.2%	CVE-2025-66084FluentCommunity (WordPress plugin) · Missing Authorization Medium4.3EPSS 0.2%2025-11-21CVE Database V5CVE-2025-66084 Missing Authorization vulnerability in Shahjahan Jewel FluentCommunity fluent-community allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects FluentCommunity: from n/a through <= 2.0.0. EPSS 0.2%Vulnerability Shahjahan Jewel CWE-862	CVE Database V5	2025-11-21
High	7.1	EPSS 0.1%	CVE-2025-53316Shahjahan Jewel WP GDPR Cookie Consent · Cross-Site Request Forgery (CSRF) High7.1EPSS 0.1%2025-11-06CVE Database V5CVE-2025-53316 Cross-Site Request Forgery (CSRF) vulnerability in Shahjahan Jewel WP GDPR Cookie Consent wp-gdpr-cookie-consent allows Stored XSS.This issue affects WP GDPR Cookie Consent: from n/a through <= 1.0.0. EPSS 0.1%Vulnerability	CVE Database V5	2025-11-06
Medium	4.3	EPSS 0.1%	CVE-2025-57885Fluent Support (WordPress plugin) · Cross-Site Request Forgery (CSRF) Medium4.3EPSS 0.1%2025-08-22CVE Database V5CVE-2025-57885 Cross-Site Request Forgery (CSRF) vulnerability in Shahjahan Jewel Fluent Support fluent-support allows Cross Site Request Forgery.This issue affects Fluent Support: from n/a through <= 1.9.1. EPSS 0.1%Vulnerability Shahjahan Jewel	CVE Database V5	2025-08-22
Critical	9.6	EPSS 0.2%	CVE-2025-54010FluentSnippets (WordPress plugin) · Cross-Site Request Forgery (CSRF) Critical9.6EPSS 0.2%2025-07-16CVE Database V5CVE-2025-54010 Cross-Site Request Forgery (CSRF) vulnerability in Shahjahan Jewel FluentSnippets easy-code-manager allows Cross Site Request Forgery.This issue affects FluentSnippets: from n/a through <= 10.50. EPSS 0.2%Vulnerability Shahjahan Jewel	CVE Database V5	2025-07-16
Critical	9.8	EPSS 0.5%	CVE-2025-39550FluentCommunity (WordPress plugin) · Deserialization of Untrusted Data Critical9.8EPSS 0.5%2025-04-17CVE Database V5CVE-2025-39550 Deserialization of Untrusted Data vulnerability in Shahjahan Jewel FluentCommunity fluent-community allows Object Injection.This issue affects FluentCommunity: from n/a through <= 1.2.15. EPSS 0.5%Vulnerability Shahjahan Jewel	CVE Database V5	2025-04-17
Medium	4.3	EPSS 0.2%	CVE-2025-24739FluentSMTP (WordPress plugin) · Cross-Site Request Forgery (CSRF) Medium4.3EPSS 0.2%2025-01-24CVE Database V5CVE-2025-24739 Cross-Site Request Forgery (CSRF) vulnerability in Shahjahan Jewel FluentSMTP fluent-smtp allows Cross Site Request Forgery.This issue affects FluentSMTP: from n/a through <= 2.2.80. EPSS 0.2%Vulnerability Shahjahan Jewel	CVE Database V5	2025-01-24
Medium	6.5	EPSS 0.4%	CVE-2024-51796Trendy Restaurant Menu (WordPress plugin) · Cross-site Scripting Medium6.5EPSS 0.4%2024-11-19CVE Database V5CVE-2024-51796 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Shahjahan Jewel Trendy Restaurant Menu trendy-restaurant-menu allows DOM-Based XSS.This issue affects Trendy Restaurant Menu: from n/a through <= 1.0.0. EPSS 0.4%Vulnerability Shahjahan Jewel	CVE Database V5	2024-11-19
Medium	5.3	EPSS 0.4%	CVE-2024-47302Fluent Support (WordPress plugin) · Missing Authorization Medium5.3EPSS 0.4%2024-11-01CVE Database V5CVE-2024-47302 Missing Authorization vulnerability in Shahjahan Jewel Fluent Support fluent-support allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Fluent Support: from n/a through <= 1.8.0. EPSS 0.4%Vulnerability Shahjahan Jewel	CVE Database V5	2024-11-01
High	8.5	EPSS 0.4%	CVE-2024-47304Fluent Support (WordPress plugin) · SQL Injection High8.5EPSS 0.4%2024-10-17CVE Database V5CVE-2024-47304 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Shahjahan Jewel Fluent Support fluent-support allows SQL Injection.This issue affects Fluent Support: from n/a through <= 1.8.0. EPSS 0.4%Vulnerability Shahjahan Jewel	CVE Database V5	2024-10-17

Page 1 of 1