CVE-2026-78272

MediumCVSS 5.4

Published: 24/08/2026(UTC)Updated: 12/10/2026(UTC)Translated: 24/08/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.23%

13th percentile - higher than 13% of all known CVEs

Summary

Broken Access Control vulnerability in Fluent Support Pro versions up to 2.3.1, affecting subscriber role users. Allows unauthorized access to functions or data.

Risk Assessment

Risk of unauthorized access to sensitive functions or data, potentially leading to security breach.

Recommendation

Update the Fluent Support Pro plugin to the latest version that includes the fix.

Other vulnerabilities in Fluent Support Pro

CVE-2026-78279Medium
Unauthenticated CSRF vulnerability in Fluent Support Pro versions up to 2.3.1. An attacker can exploit this to perform unauthorized actions in the context of a logged-in user.

Original NVD description (English source)

Subscriber Broken Access Control in Fluent Support Pro <= 2.3.1 versions.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS