CVE-2026-78279

MediumCVSS 5.4

Published: 24/08/2026(UTC)Updated: 12/10/2026(UTC)Translated: 24/08/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.13%

2th percentile - higher than 2% of all known CVEs

Summary

Unauthenticated CSRF vulnerability in Fluent Support Pro versions up to 2.3.1. An attacker can exploit this to perform unauthorized actions in the context of a logged-in user.

Risk Assessment

Risk of unauthorized changes to support settings or ticket data, potentially leading to confidentiality or integrity breach.

Recommendation

Update the Fluent Support Pro plugin to the latest version that includes the fix.

Other vulnerabilities in Fluent Support Pro

CVE-2026-78272Medium
Broken Access Control vulnerability in Fluent Support Pro versions up to 2.3.1, affecting subscriber role users. Allows unauthorized access to functions or data.

Original NVD description (English source)

Unauthenticated Cross Site Request Forgery (CSRF) in Fluent Support Pro <= 2.3.1 versions.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS