Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1000 CNY

100.0%

Shahjahan Jewel — Vulnerabilities & Security Advisories 16

Browse all 16 CVE security advisories affecting Shahjahan Jewel. AI-powered Chinese analysis, POCs, and references for each vulnerability.

Shahjahan Jewel is a jewelry management system primarily used for inventory tracking and sales processing in retail environments. Historically, it has been susceptible to multiple remote code execution vulnerabilities, cross-site scripting flaws, and privilege escalation issues, accounting for its 16 recorded CVEs. The application often suffers from insufficient input validation and insecure authentication mechanisms, allowing attackers to execute arbitrary code or bypass access controls. While no major public security incidents have been widely documented, the consistent pattern of vulnerabilities across multiple versions indicates significant security gaps that could lead to complete system compromise or data breaches if left unpatched.

CVE IDTitleCVSSSeverityPublished
CVE-2026-25313 WordPress FluentForm plugin <= 6.1.14 - Broken Access Control vulnerability — FluentFormCWE-862 4.3 Medium2026-02-19
CVE-2026-25008 WordPress Ninja Tables plugin <= 5.2.5 - Sensitive Data Exposure vulnerability — Ninja TablesCWE-201 4.3 Medium2026-02-19
CVE-2025-69001 WordPress FluentForm plugin <= 6.1.11 - Arbitrary Shortcode Execution vulnerability — FluentFormCWE-94 5.3 Medium2026-01-22
CVE-2025-67926 WordPress Fluent Support plugin <= 1.10.4 - Broken Access Control vulnerability — Fluent SupportCWE-862 6.5 Medium2026-01-08
CVE-2025-69351 WordPress Ninja Tables plugin <= 5.2.4 - SQL Injection vulnerability — Ninja TablesCWE-89 8.5 High2026-01-06
CVE-2025-67597 WordPress Fluent Booking plugin <= 1.9.11 - Broken Access Control vulnerability — Fluent BookingCWE-862 4.3 Medium2025-12-09
CVE-2025-67519 WordPress Ninja Tables plugin <= 5.2.3 - SQL Injection vulnerability — Ninja TablesCWE-89 7.6 High2025-12-09
CVE-2025-66084 WordPress FluentCommunity plugin <= 2.0.0 - Broken Access Control vulnerability — FluentCommunityCWE-862 4.3 Medium2025-11-21
CVE-2025-53316 WordPress WP GDPR Cookie Consent plugin <= 1.0.0 - Cross Site Request Forgery (CSRF) Vulnerability — WP GDPR Cookie ConsentCWE-352 7.1 High2025-11-06
CVE-2025-57885 WordPress Fluent Support Plugin <= 1.9.1 - Cross Site Request Forgery (CSRF) Vulnerability — Fluent SupportCWE-352 4.3 Medium2025-08-22
CVE-2025-54010 WordPress FluentSnippets plugin <= 10.50 - Cross Site Request Forgery (CSRF) Vulnerability — FluentSnippetsCWE-352 9.6 Critical2025-07-16
CVE-2025-39550 WordPress FluentCommunity plugin <= 1.2.15 - PHP Object Injection Vulnerability — FluentCommunityCWE-502 9.8 Critical2025-04-17
CVE-2025-24739 WordPress FluentSMTP plugin <= 2.2.80 - Cross Site Request Forgery (CSRF) vulnerability — FluentSMTPCWE-352 4.3 Medium2025-01-24
CVE-2024-51796 WordPress Trendy Restaurant Menu plugin <= 1.0.0 - Cross Site Scripting (XSS) vulnerability — Trendy Restaurant MenuCWE-79 6.5 Medium2024-11-19
CVE-2024-47302 WordPress Fluent Support plugin <= 1.8.0 - Broken Access Control on Email Verification vulnerability — Fluent SupportCWE-862 5.3 Medium2024-11-01
CVE-2024-47304 WordPress Fluent Support plugin <= 1.8.0 - SQL Injection vulnerability — Fluent SupportCWE-89 8.5 High2024-10-17

This page lists every published CVE security advisory associated with Shahjahan Jewel. Each entry links to a detailed page with CVSS scoring, CWE classification, affected products and references. AI-generated Chinese analysis is provided for fast triage.