WordPress security by component
FluentAuth
FluentAuth (fluent-security) is a WordPress plugin with 1 published CVE record in this archive. The latest tracked vulnerability was published Sep 17, 2026; the highest published CVSS base score is 5.3.
Plugin slug:
fluent-securityLatest vulnerability
CVE-2026-78296: FluentAuth accepts insufficiently authenticated identity data
FluentAuth through 2.1.2 has insufficient verification of data authenticity that permits identity spoofing. The CNA vector allows an unauthenticated request without victim interaction and assigns limited integrity impact. The export does not identify the input, endpoint, verification function, impersonated identity scope or whether a WordPress login session is issued. It does not establish administrator takeover. The affected-version data marks 3.0.0 unaffected.
| Safe version |
|
||
|---|---|---|---|
| Sep 17, 2026 |
CVE-2026-78296
FluentAuth accepts insufficiently authenticated identity data
FluentAuth through 2.1.2 has insufficient verification of data authenticity that permits identity spoofing. The CNA vector allows an unauthenticated request without victim interaction and assigns limited integrity impact. The export does not identify the input, endpoint, verification function, impersonated identity scope or whether a WordPress login session is issued. It does not establish administrator takeover. The affected-version data marks 3.0.0 unaffected.
|
3.0.0 |
CVE5.3
|