Unauthorized Access Vulnerability in Fluent Support Pro Plugin for WordPress
CVE-2026-78467

4.3MEDIUM

Key Information:

Vendor

WordPress
Status
Fluent Support Pro
Vendor
CVE Published:
25 August 2026

What is CVE-2026-78467?

The Fluent Support Pro plugin for WordPress contains a security vulnerability that allows unauthorized actions to be performed by authenticated users with Subscriber-level access or higher. Due to a missing capability check in its functionality, this flaw exposes the plugin to potential misuse by attackers who can leverage their authenticated status to access unauthorized features or data. Users should ensure that they update to the latest version to mitigate this vulnerability.

Affected Version(s)

Fluent Support Pro 0 <= 2.3.1

References

https://www.wordfence.com/threat-intel/vulnerabilities/id...
https://fluentsupport.com/

CVSS V3.1

Score:
4.3
Severity:
MEDIUM
Confidentiality:
None
Integrity:
Low
Availability:
None
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

Ananda Dhakal
.