FluentCommunity vulnerabilities

3 known CVE vulnerabilities in FluentCommunity, translated and rated.

CVE-2026-111836Medium
The FluentCommunity plugin up to version 2.11.0 has a missing authorization vulnerability that allows exploitation of incorrectly configured access control security levels. An unauthorized user may perform actions requiring higher privileges.
CVE-2026-66467Medium
Cross Site Scripting (XSS) vulnerability in FluentCommunity versions up to 2.7.5, exploitable by a user with Subscriber role.
CVE-2025-66084Medium
Missing Authorization vulnerability in Shahjahan Jewel FluentCommunity fluent-community allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects FluentCommunity: from n/a through <= 2.0.0.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS