CVE-2026-78296— WordPress FluentAuth plugin <= 2.1.2 - Email Verification Bypass vulnerability
Quick assessment
Affected
WP ManageNinja LLC FluentAuth
Exploitation
No confirmed in-the-wild exploitation; assess based on exposure
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.
这段英文描述的中文翻译如下： WP ManageNinja LLC 的 FluentAuth 插件存在“数据真实性校验不足”漏洞，可被利用进行身份伪装攻击。 该问题影响 FluentAuth：从 n/a 到 2.1.2 版本。 --- 术语说明（供参考）： Insufficient Verification of Data Authenticity：数据真实性验证不足 Identity Spoofing：身份伪装/身份冒充 affects FluentAuth: from n/a through 2.1.2：影响范
Get alerts for future matching vulnerabilities
Log in to subscribe
I. Basic Information for CVE-2026-78296
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
WordPress FluentAuth plugin <= 2.1.2 - Email Verification Bypass vulnerability
Source: CVE Program / CVE List V5
Vulnerability Description
Insufficient Verification of Data Authenticity vulnerability in WP ManageNinja LLC FluentAuth allows Identity Spoofing.
This issue affects FluentAuth: from n/a through 2.1.2.
Source: CVE Program / CVE List V5
CVSS Information
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N
Source: CVE Program / CVE List V5
Vulnerability Type
对数据真实性的验证不充分
Source: CVE Program / CVE List V5
Affected Products
| Vendor | Product | Affected Versions | CPE | Subscribe |
|---|---|---|---|---|
| WP ManageNinja LLC | FluentAuth | n/a ~ 2.1.2 | - |
|
II. Public POCs for CVE-2026-78296
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POC
Premium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2026-78296
请登录查看更多情报信息。
Vendor Advisories for CVE-2026-78296 (1)
IV. Related Vulnerabilities
Same vendor: WP ManageNinja LLC
-
CVE-2026-78278
WordPress Fluent Boards Pro plugin <= 2.0.11 - Insecure Dire -
CVE-2026-78279
WordPress Fluent Support Pro plugin <= 2.3.1 - Cross Site Re -
CVE-2026-78277
WordPress FluentCRM Pro plugin <= 3.1.12 - Server Side Reque -
CVE-2026-78272
WordPress Fluent Support Pro plugin <= 2.3.1 - Broken Access -
CVE-2026-78270
WordPress FluentCRM Pro plugin <= 3.1.12 - SQL Injection vul
Same weakness: CWE-345
-
CVE-2026-54581
mport bootstrap index fetch can continue after hash verifica -
CVE-2026-86038
libp2p: Gossipsub StrictSign accepts attacker-signed message -
CVE-2026-26950
Dell SmartFabric Manager 2.2.1前权限提升 -
CVE-2026-61591
djust: Unsigned client state snapshot is restored as trusted -
CVE-2026-63127
RMCP: Missing Resource Field Validation in OAuth Protected R
V. Comments for CVE-2026-78296
No comments yet