CVE-2026-78272
MediumCVSS 5.4Summary
Broken Access Control vulnerability in Fluent Support Pro versions up to 2.3.1, affecting subscriber role users. Allows unauthorized access to functions or data.
Risk Assessment
Risk of unauthorized access to sensitive functions or data, potentially leading to security breach.
Recommendation
Update the Fluent Support Pro plugin to the latest version that includes the fix.
Other vulnerabilities in Fluent Support Pro
See all- CVE-2026-78279Medium
Unauthenticated CSRF vulnerability in Fluent Support Pro versions up to 2.3.1. An attacker can exploit this to perform unauthorized actions in the context of a logged-in user.
- CVE-2026-78467Medium
The Fluent Support Pro plugin for WordPress is vulnerable to unauthorized access due to a missing capability check on a function in all versions up to, and including, 2.3.1. This makes it possible for authenticated attackers, with Subscriber-level access and above, to perform an unauthorized action.
Original NVD description (English source)
Subscriber Broken Access Control in Fluent Support Pro <= 2.3.1 versions.