These pages are published after PatchSiren validates generated defensive summaries against stored public CVE and source evidence.
CVE-2026-109694 is a Privilege Escalation vulnerability in the WordPress Fluent CRM plugin versions up to 3.2.5. This issue allows attackers to escalate privileges due to incorrect privilege assignment. The vulnerability has a CVSS score of 9.8, indicating critical severity. The CVE record was published on 2026-10-15T11:00:13.754Z and was last modified on 2026-10-15T14:37:51.972Z.
The CVE-2026-109696 vulnerability affects WordPress FluentBoards plugin versions up to and including 2.1.0, allowing Exploiting Incorrectly Configured Access Control Security Levels due to a Missing Authorization issue. This Medium severity vulnerability, with a CVSS score of 5.4, requires attention from defenders responsible for WordPress installations using this plugin. They should verify the plugin ver [truncated]
A Missing Authorization vulnerability in WP ManageNinja LLC Fluent Forms Pro Add On Pack fluentformpro allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects Fluent Forms Pro Add On Pack: from n/a through 6.2.13. The vulnerability could allow unauthorized access or exploitation of incorrectly configured access control security levels. Defenders should assess exposure a [truncated]
A CVE record for an Insufficient Verification of Data Authenticity vulnerability in WP ManageNinja LLC FluentAuth was published on 2026-09-17T12:18:26.853Z and last modified on 2026-09-19T15:17:02.303Z. The NVD entry is currently Deferred. This vulnerability allows Identity Spoofing, impacting defenders who must verify data authenticity to prevent identity spoofing. Affected systems require immediate atte [truncated]
A Cross Site Request Forgery (CSRF) vulnerability exists in Fluent Support Pro plugin versions up to 2.3.1. This issue allows unauthenticated attackers to perform CSRF attacks.
CVE-2026-78278 is a Subscriber Insecure Direct Object References (IDOR) vulnerability in Fluent Boards Pro plugin versions <= 2.0.11. The vulnerability has a CVSS score of 5.3 and a severity of MEDIUM. The CVE record was published on 2026-08-24T12:16:55.507Z and was last modified on 2026-10-12T15:10:00.207Z.
A Server Side Request Forgery (SSRF) vulnerability exists in FluentCRM Pro versions up to 3.1.12. This CVE was published on 2026-08-24T12:16:55.347Z and last modified on 2026-10-12T15:10:00.207Z. The vulnerability has a CVSS score of 4.9, indicating a medium severity level.
A Subscriber Broken Access Control vulnerability exists in Fluent Support Pro versions up to 2.3.1. This issue allows unauthorized access to subscriber data. The CVE record was published on 2026-08-24T12:16:55.193Z and has not been modified since then. The NVD entry is currently Deferred.
A SQL injection vulnerability exists in FluentCRM Pro plugin versions up to 3.1.12. This issue allows an attacker to execute arbitrary SQL queries, potentially leading to data breaches or other malicious activities.