** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2026-78272. Reason: This candidate is a reservation duplicate of CVE-2026-78272. Notes: All CVE users should reference CVE-2026-78272 instead of this candidate. All references and descriptions in this candidate have been removed to prevent accidental usage.
History

Fri, 28 Aug 2026 21:00:00 +0000

Type Values Removed Values Added
First Time appeared Fluent Support
Fluent Support fluent Support Pro
Wordpress
Wordpress wordpress
Vendors & Products Fluent Support
Fluent Support fluent Support Pro
Wordpress
Wordpress wordpress

Fri, 28 Aug 2026 19:30:00 +0000

Type Values Removed Values Added
Title Fluent Support Pro <= 2.3.1 - Missing Authorization
Metrics ssvc

{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'partial'}, 'version': '2.0.3'}


Wed, 26 Aug 2026 17:00:00 +0000

Type Values Removed Values Added
Description The Fluent Support Pro plugin for WordPress is vulnerable to unauthorized access due to a missing capability check on a function in all versions up to, and including, 2.3.1. This makes it possible for authenticated attackers, with Subscriber-level access and above, to perform an unauthorized action. ** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2026-78272. Reason: This candidate is a reservation duplicate of CVE-2026-78272. Notes: All CVE users should reference CVE-2026-78272 instead of this candidate. All references and descriptions in this candidate have been removed to prevent accidental usage.

Tue, 25 Aug 2026 18:30:00 +0000

Type Values Removed Values Added
Metrics ssvc

{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'partial'}, 'version': '2.0.3'}


Tue, 25 Aug 2026 05:45:00 +0000

Type Values Removed Values Added
Description The Fluent Support Pro plugin for WordPress is vulnerable to unauthorized access due to a missing capability check on a function in all versions up to, and including, 2.3.1. This makes it possible for authenticated attackers, with Subscriber-level access and above, to perform an unauthorized action.
Title Fluent Support Pro <= 2.3.1 - Missing Authorization
Weaknesses CWE-862
References
Metrics cvssV3_1

{'score': 4.3, 'vector': 'CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N'}


cve-icon MITRE

Status: REJECTED

Assigner: Wordfence

Published: 2026-08-25T05:31:27.833Z

Updated: 2026-08-26T16:41:46.643Z

Reserved: 2026-08-24T16:33:48.489Z

Link: CVE-2026-78467

cve-icon Vulnrichment

Updated:

cve-icon NVD

Status : Deferred

Published: 2026-08-25T06:19:00.660

Modified: 2026-08-26T16:19:05.917

Link: CVE-2026-78467

cve-icon Redhat

No data.