CVE-2026-78274

CriticalCVSS 9.1

Published: 27/08/2026(UTC)Translated: 27/08/2026(UTC)NVD NIST

Summary

The Fluent Boards Pro plugin versions up to 2.0.11 contain an arbitrary file upload vulnerability exploitable by users with the editor role. This can lead to execution of malicious code on the server.

Risk Assessment

Risk of server compromise by uploading a malicious file that can be executed.

Recommendation

Update the Fluent Boards Pro plugin to the latest version that includes a fix for this vulnerability.

Original NVD description (English source)

Editor Arbitrary File Upload in Fluent Boards Pro <= 2.0.11 versions.