CVE-2026-78279 WP ManageNinja LLC CVE debrief

Who should care

Defenders responsible for WordPress installations using the Fluent Support Pro plugin should assess exposure and prioritize verification and remediation.

Why it matters

CVE-2026-78279 is a CSRF vulnerability in Fluent Support Pro plugin versions up to 2.3.1, allowing unauthenticated attackers to perform CSRF attacks. Defenders should prioritize verifying and updating the plugin to prevent potential attacks.

• Potential for unauthorized actions on behalf of authenticated users
• Possible disruption of website functionality
• Need for verification of plugin version and update to a patched version

Technical summary

The Fluent Support Pro plugin is vulnerable to Cross Site Request Forgery (CSRF) attacks in versions up to 2.3.1. This allows unauthenticated attackers to perform CSRF attacks.

Defensive priority

Defenders should prioritize verifying and updating Fluent Support Pro installations to prevent potential CSRF attacks.

Recommended defensive actions

• Verify Fluent Support Pro plugin version and update to a patched version if necessary
• Implement CSRF protection measures for the plugin
• Monitor for potential CSRF attacks

Evidence notes

The vulnerability was reported by Patchstack and is documented in the NVD vulnerability detail page.

Sources and references

Methodology and review provenance

AI-assisted synthesis based on stored public vulnerability evidence. System validation, approval state, and publication status do not by themselves establish human review of this revision. PatchSiren helps prioritize defensive review and does not prove exposure or remediation on any system.