PT-2026-82458 · WordPress · Fluent Boards Pro

·

CVE-2026-78276

·

Published

2026-08-27

·

Updated

2026-08-27

CVSS v3.1

7.2

High

VectorAV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions Fluent Boards Pro versions prior to 2.0.12
Description PHP Object Injection occurs in the Editor component. PHP Object Injection is a vulnerability that allows an attacker to inject malicious objects into the application, which can lead to unauthorized code execution or other security breaches during the deserialization process.
Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability. Restrict access to the Editor component to minimize the risk of exploitation.

Deserialization of Untrusted Data

Found an issue in the description? Have something to add? Feel free to write us 👾

Weakness Enumeration

Related Identifiers

CVE-2026-78276

Affected Products

Fluent Boards Pro