PT-2026-81174 · WordPress · Fluent Boards Pro

Ananda Dhakal

·

CVE-2026-78466

·

Published

2026-08-25

·

Updated

2026-08-25

CVSS v3.1

4.3

Medium

VectorAV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N
Name of the Vulnerable Software and Affected Versions Fluent Boards Pro versions prior to 2.0.12
Description An Insecure Direct Object Reference occurs due to missing validation on a user controlled key. This allows authenticated attackers with Subscriber-level access and above to perform unauthorized actions.
Recommendations Update Fluent Boards Pro to version 2.0.12 or later.

Fix

IDOR

Found an issue in the description? Have something to add? Feel free to write us 👾
dbugs@ptsecurity.com

Weakness Enumeration

CWE-639

Related Identifiers

CVE-2026-78466

Affected Products

Fluent Boards Pro