CVE-2026-7798

The FluentCRM – Email Newsletter, Automation, Email Marketing, Email Campaigns, Optins, Leads, and CRM Solution plugin for WordPress is vulnerable to Blind Server-Side Request Forgery in all versions up to, and including, 2.9.87 via the 'SubscribeURL' parameter. This makes it possible for unauthenticated attackers to make web requests to arbitrary locations originating from the web application and can be used to query and modify information from internal services. Exploitation requires that the SES bounce handling key ('_fc_bounce_key') has never been stored (i.e., the site is in its default/unconfigured state with respect to SES bounce handling) as visiting the bounce configuration page auto-generates and stores a random key that causes the authentication check to evaluate correctly and reject unauthenticated requests.

• CWE-918

• https://plugins.trac.wordpress.org/browser/fluent-crm/tags/2.9.87/app/Hooks/Handlers/ExternalPages.php#L113
• https://plugins.trac.wordpress.org/browser/fluent-crm/tags/2.9.87/app/Hooks/Handlers/ExternalPages.php#L85
• https://plugins.trac.wordpress.org/browser/fluent-crm/tags/2.9.87/app/Hooks/Handlers/ExternalPages.php#L87
• https://plugins.trac.wordpress.org/browser/fluent-crm/trunk/app/Hooks/Handlers/ExternalPages.php#L113
• https://plugins.trac.wordpress.org/browser/fluent-crm/trunk/app/Hooks/Handlers/ExternalPages.php#L85
• https://plugins.trac.wordpress.org/browser/fluent-crm/trunk/app/Hooks/Handlers/ExternalPages.php#L87
• https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&old=3532271%40fluent-crm&new=3532271%40fluent-crm&sfp_email=&sfph_mail=
• https://www.wordfence.com/threat-intel/vulnerabilities/id/5c3ca2d7-7af9-401f-bc5a-1796c6253cb0?source=cve

Published

May 22, 2026

Last Modified

Jul 23, 2026

Status

Deferred

• One Click Account Takeover in GranolaHow a notification link broke out of Electron and led to a one-click account takeover.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2026-7790Uncontrolled Resource Consumption vulnerability in ninenines…7.5
• CVE-2026-7791Improper privilege management in the log rotation mechanism …8.5
• CVE-2026-7792The WPForms – Easy Form Builder for WordPress – Contact Form…5.3
• CVE-2026-7795The Click to Chat – WA Widget plugin for WordPress is vulner…6.4
• CVE-2026-7796The EmbedPress – PDF Embedder, Embed PDF viewer, YouTube Vid…6.4
• CVE-2026-7797The Appointment Booking Calendar — Simply Schedule Appointme…7.5
• CVE-2026-7802The Frontend Admin by DynamiApps plugin for WordPress is vul…8.8
• CVE-2026-7803IBM Langflow OSS 1.0.0 through 1.10.0 could allow arbitrary …9.8
• CVE-2026-7805Rejected reason: ** REJECT ** DO NOT USE THIS CANDIDATE NUMB…
• CVE-2026-7807SmarterTools SmarterMail builds prior to 9560 contain a loca…8.8
• CVE-2026-7810A flaw has been found in UsamaK98 python-notebook-mcp up to …7.3
• CVE-2026-7811A vulnerability has been found in 54yyyu code-mcp up to 4cfc…7.3