Threat database

Unauthenticated Broken Access Control in Fluent Affiliate Pro <= 1.6.4 versions.

Unauthenticated Broken Access Control in FluentBooking Pro < 2.5.0 versions.

Unauthenticated Bypass Vulnerability in FluentBooking Pro <= 2.2.1 versions.

Subscriber Privilege Escalation in Fluent Forms Pro Add On Pack <= 6.2.12 versions.

Unauthenticated Broken Access Control in Fluent Forms Pro Add On Pack <= 6.2.12 versions.

CVE-2026-81273 is a high severity Cross-Site Request Forgery (CSRF) vulnerability affecting WP Manage Ninja's FluentBooking Pro plugin versions up to and including 2.2.4. The vulnerability allows unauthenticated attackers to perform actions on behalf of legitimate users by tricking them into submitting unwanted requests. No official patch or remediation information is currently available.

CVE-2026-81272 is a medium severity vulnerability in WP Manage Ninja's FluentPlayer Pro plugin, affecting versions up to 1.3.2. It involves broken access control due to missing authorization checks in the editor functionality, classified under CWE-862. The vulnerability allows users with high privileges to perform unauthorized actions that impact integrity without affecting confidentiality or availability.

CVE-2026-78276 is a high-severity vulnerability in WP Manage Ninja's Fluent Boards Pro plugin, affecting versions up to and including 2.0.11. It involves PHP object injection due to deserialization of untrusted data, classified under CWE-502. This flaw can lead to complete compromise of confidentiality, integrity, and availability if exploited. No official patch or remediation guidance is currently available from the vendor.

CVE-2026-78275 is a path traversal vulnerability in WP Manage Ninja Fluent Boards Pro affecting versions up to and including 2.0.11. It allows an editor-level user to arbitrarily delete files due to improper limitation of pathnames to restricted directories. The vulnerability has a CVSS score of 6.8, indicating medium severity, with a significant impact on availability but no direct confidentiality or integrity impact reported. No official patch or remediation guidance is currently available.

CVE-2026-78274 is a critical vulnerability in WP Manage Ninja's Fluent Boards Pro plugin, affecting versions up to 2.0.11. It involves an unrestricted file upload flaw (CWE-434) that allows users with editor privileges to upload arbitrary files, potentially leading to full system compromise. The vulnerability has a high CVSS score of 9.1, indicating severe impact on confidentiality, integrity, and availability. No official patch or remediation guidance is currently available from the vendor. There are no known exploits in the wild at this time.

CVE-2026-78273 is a medium severity cross-site scripting (XSS) vulnerability affecting WP Manage Ninja's Fluent Boards Pro plugin versions up to and including 2.0.11. The flaw allows subscribers to inject malicious scripts due to improper input neutralization during web page generation. This vulnerability can lead to partial confidentiality, integrity, and availability impacts. No official patch or remediation guidance has been provided yet, and there are no known exploits in the wild.

CVE-2026-78271 is a high-severity vulnerability in WP Manage Ninja's FluentCRM Pro plugin, affecting versions up to and including 3.1.12. It involves incorrect privilege assignment that allows an editor-level user to escalate privileges. This flaw could lead to full compromise of confidentiality, integrity, and availability of the affected system. No official patch or remediation guidance has been provided yet.