CVE-2026-111836
MediumCVSS 4.3Summary
The FluentCommunity plugin up to version 2.11.0 has a missing authorization vulnerability that allows exploitation of incorrectly configured access control security levels. An unauthorized user may perform actions requiring higher privileges.
Risk Assessment
This could allow unauthorized operations within the community, leading to data compromise or takeover of administrative functions.
Recommendation
Update the FluentCommunity plugin to a version later than 2.11.0 and review user permissions.
Other vulnerabilities in FluentCommunity
See all- CVE-2026-66467Medium
Cross Site Scripting (XSS) vulnerability in FluentCommunity versions up to 2.7.5, exploitable by a user with Subscriber role.
- CVE-2025-66084Medium
Missing Authorization vulnerability in Shahjahan Jewel FluentCommunity fluent-community allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects FluentCommunity: from n/a through <= 2.0.0.
Original NVD description (English source)
Missing Authorization vulnerability in WP ManageNinja LLC FluentCommunity fluent-community allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects FluentCommunity: from n/a through 2.11.0.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS