CVE-2026-78275: CWE-22 Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') in WP Manage Ninja Fluent Boards Pro
Description
CVE-2026-78275 is a path traversal vulnerability in WP Manage Ninja Fluent Boards Pro affecting versions up to and including 2.0.11. It allows an editor-level user to arbitrarily delete files due to improper limitation of pathnames to restricted directories. The vulnerability has a CVSS score of 6.8, indicating medium severity, with a significant impact on availability but no direct confidentiality or integrity impact reported. No official patch or remediation guidance is currently available.
CVSS v3.1
Score 6.8medium
Affected software
WP Manage Ninja
Fluent Boards Pro
Weaknesses
AI-Powered Analysis
Machine-generated threat intelligence
Technical Analysis
This vulnerability (CWE-22) in Fluent Boards Pro allows an editor with privileges to perform arbitrary file deletion by exploiting improper pathname restrictions. It affects versions up to 2.0.11 and can cause denial of service by deleting files. The CVSS vector indicates network attack vector, low attack complexity, required privileges at the high level, no user interaction, and a scope change with impact on availability only.
Potential Impact
The vulnerability can lead to denial of service by enabling an editor to delete arbitrary files within the system. There is no reported impact on confidentiality or integrity. The attack requires editor-level privileges, limiting the attack surface to authenticated users with elevated permissions.
Mitigation Recommendations
Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, restrict editor privileges to trusted users only and monitor for suspicious file deletion activities related to Fluent Boards Pro.
Technical Details
- Data Version
- 5.2
- Assigner Short Name
- Patchstack
- Date Reserved
- 2026-08-24T07:37:56.725Z
- Cvss Version
- 3.1
- State
- PUBLISHED
Threat ID: 6a9001f4acd9273b491092fe
Added to database: 08/27/2026, 09:23:00 UTC
Last enriched: 09/10/2026, 08:39:34 UTC
Last updated: 10/11/2026, 06:48:18 UTC
Views: 67
Community Reviews
0 reviewsCrowdsource mitigation strategies, share intel context, and vote on the most helpful responses. Sign in to add your voice and help keep defenders ahead.
Want to contribute mitigation steps or threat intel context? Sign in or create an account to join the community discussion.
Actions
Updates to AI analysis require Pro Console access. Upgrade inside Console → Billing.
External Links
Need more coverage?
Upgrade to Pro Console for AI refresh and higher limits.
For incident response and remediation, OffSeq services can help resolve threats faster.
Latest Threats
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.