CVE-2025-66084
MediumCVSS 4.3Exploitation Probability (EPSS)
Low risk7th percentile - higher than 7% of all known CVEs
Summary
Missing Authorization vulnerability in Shahjahan Jewel FluentCommunity fluent-community allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects FluentCommunity: from n/a through <= 2.0.0.
Risk Assessment
An attacker could exploit this to gain unauthorized access to functionality or data, potentially modifying community content or settings.
Recommendation
Update the plugin to a version newer than 2.0.0 or apply the vendor fix. Verify access control configuration.
Other vulnerabilities in FluentCommunity
See all- CVE-2026-111836Medium
The FluentCommunity plugin up to version 2.11.0 has a missing authorization vulnerability that allows exploitation of incorrectly configured access control security levels. An unauthorized user may perform actions requiring higher privileges.
- CVE-2026-66467Medium
Cross Site Scripting (XSS) vulnerability in FluentCommunity versions up to 2.7.5, exploitable by a user with Subscriber role.
Original NVD description (English source)
Missing Authorization vulnerability in Shahjahan Jewel FluentCommunity fluent-community allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects FluentCommunity: from n/a through <= 2.0.0.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS