WP E-Signature CVE debriefs

These pages are published after PatchSiren validates generated defensive summaries against stored public CVE and source evidence.

HIGH WP E-Signature CVE published 2026-10-18

CVE-2026-110383

CVE-2026-110383 is an Authorization Bypass Through User-Controlled Key vulnerability in the Electronic Signature Add-on for Fluent Forms, affecting versions from n/a through 2.0.5. This issue allows attackers to bypass authorization due to incorrectly configured access control security levels. Defenders should assess exposure, prioritize remediation, and verify the effectiveness of compensating controls.