Threats tagged 'ghsa-mxvf-mh6j-w652'

CVE-2026-78271 is a high-severity vulnerability in WP Manage Ninja's FluentCRM Pro plugin, affecting versions up to and including 3.1.12. It involves incorrect privilege assignment that allows an editor-level user to escalate privileges. This flaw could lead to full compromise of confidentiality, integrity, and availability of the affected system. No official patch or remediation guidance has been provided yet.