Description
** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2026-78272. Reason: This candidate is a reservation duplicate of CVE-2026-78272. Notes: All CVE users should reference CVE-2026-78272 instead of this candidate. All references and descriptions in this candidate have been removed to prevent accidental usage.
Published: 2026-08-25
Score: 4.3 Medium
EPSS: n/a
KEV: No
Impact: n/a
Action: n/a
AI Analysis

Analysis and contextual insights are available on OpenCVE Cloud.

Remediation

No vendor fix or workaround currently provided.

Additional remediation guidance may be available on OpenCVE Cloud.

Tracking

Sign in to view the affected projects.

Advisories

No advisories yet.

History

Fri, 28 Aug 2026 21:00:00 +0000

Type Values Removed Values Added
First Time appeared Fluent Support
Fluent Support fluent Support Pro
Wordpress
Wordpress wordpress
Vendors & Products Fluent Support
Fluent Support fluent Support Pro
Wordpress
Wordpress wordpress

Fri, 28 Aug 2026 19:30:00 +0000

Type Values Removed Values Added
Title Fluent Support Pro <= 2.3.1 - Missing Authorization
Metrics ssvc

{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'partial'}, 'version': '2.0.3'}


Wed, 26 Aug 2026 17:00:00 +0000

Type Values Removed Values Added
Description The Fluent Support Pro plugin for WordPress is vulnerable to unauthorized access due to a missing capability check on a function in all versions up to, and including, 2.3.1. This makes it possible for authenticated attackers, with Subscriber-level access and above, to perform an unauthorized action. ** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2026-78272. Reason: This candidate is a reservation duplicate of CVE-2026-78272. Notes: All CVE users should reference CVE-2026-78272 instead of this candidate. All references and descriptions in this candidate have been removed to prevent accidental usage.

Tue, 25 Aug 2026 18:30:00 +0000

Type Values Removed Values Added
Metrics ssvc

{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'partial'}, 'version': '2.0.3'}


Tue, 25 Aug 2026 05:45:00 +0000

Type Values Removed Values Added
Description The Fluent Support Pro plugin for WordPress is vulnerable to unauthorized access due to a missing capability check on a function in all versions up to, and including, 2.3.1. This makes it possible for authenticated attackers, with Subscriber-level access and above, to perform an unauthorized action.
Title Fluent Support Pro <= 2.3.1 - Missing Authorization
Weaknesses CWE-862
References
Metrics cvssV3_1

{'score': 4.3, 'vector': 'CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N'}


Subscriptions

Fluent Support Fluent Support Pro
Wordpress Wordpress
cve-icon MITRE

Status: REJECTED

Assigner: Wordfence

Published:

Updated: 2026-08-26T16:41:46.643Z

Reserved: 2026-08-24T16:33:48.489Z

Link: CVE-2026-78467

cve-icon Vulnrichment

Updated:

cve-icon NVD

Status : Deferred

Published: 2026-08-25T06:19:00.660

Modified: 2026-08-26T16:19:05.917

Link: CVE-2026-78467

cve-icon Redhat

No data.

cve-icon OpenCVE Enrichment

Updated: 2026-08-28T20:38:15Z

Weaknesses