CVE-2026-81296: CWE-862 Missing Authorization in WP Manage Ninja Fluent Forms Pro Add On Pack

This vulnerability (CVE-2026-81296) is an unauthenticated broken access control issue in the Fluent Forms Pro Add On Pack by WP Manage Ninja, affecting versions up to 6.2.12. It allows attackers without any privileges to bypass authorization controls, potentially leading to unauthorized modification of data or functionality. The CVSS 3.1 vector indicates network attack vector, low attack complexity, no privileges required, no user interaction, unchanged scope, no confidentiality impact, high integrity impact, and no availability impact. There is no vendor advisory or patch information available at this time.

The vulnerability allows unauthenticated attackers to bypass access controls, leading to high integrity impact. This means attackers could modify or manipulate data or application behavior without authorization. Confidentiality and availability are not impacted according to the CVSS vector. No known exploits are reported in the wild.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, users should monitor vendor communications for updates. No specific mitigations or workarounds are currently documented.