{"dataType": "CVE_RECORD", "dataVersion": "5.2", "cveMetadata": {"cveId": "CVE-2026-78466", "assignerOrgId": "b15e7b5b-3da4-40ae-a43c-f7aa60e62599", "state": "REJECTED", "assignerShortName": "Wordfence", "dateReserved": "2026-08-24T16:32:17.654Z", "datePublished": "2026-08-25T05:31:28.620Z", "dateUpdated": "2026-08-26T16:39:13.200Z", "dateRejected": "2026-08-26T16:39:13.200Z"}, "containers": {"cna": {"rejectedReasons": [{"lang": "en", "value": "** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2026-78278. Reason: This candidate is a reservation duplicate of CVE-2026-78278. Notes: All CVE users should reference CVE-2026-78278 instead of this candidate. All references and descriptions in this candidate have been removed to prevent accidental usage."}], "providerMetadata": {"orgId": "b15e7b5b-3da4-40ae-a43c-f7aa60e62599", "shortName": "Wordfence", "dateUpdated": "2026-08-26T16:39:13.200Z"}}}}

{}

{"affected": [{"affectedData": [{"defaultStatus": "unaffected", "product": "Fluent Boards Pro", "vendor": "Fluent Boars", "versions": [{"lessThanOrEqual": "2.0.11", "status": "affected", "version": "0", "versionType": "semver"}]}], "source": "security@wordfence.com"}], "cveTags": [], "descriptions": [{"lang": "en", "value": "The Fluent Boards Pro plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions up to, and including, 2.0.11 due to missing validation on a user controlled key. This makes it possible for authenticated attackers, with Subscriber-level access and above, to perform an unauthorized action."}], "id": "CVE-2026-78466", "lastModified": "2026-08-26T16:19:05.917", "metrics": {"cvssMetricV31": [{"cvssData": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "NONE", "baseScore": 4.3, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "integrityImpact": "LOW", "privilegesRequired": "LOW", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N", "version": "3.1"}, "exploitabilityScore": 2.8, "impactScore": 1.4, "source": "security@wordfence.com", "type": "Primary"}]}, "published": "2026-08-25T06:19:00.227", "references": [{"source": "security@wordfence.com", "url": "https://fluentboards.com/"}, {"source": "security@wordfence.com", "url": "https://www.wordfence.com/threat-intel/vulnerabilities/id/bec19d80-ba51-4ff8-a111-c2e45928fb51?source=cve"}], "sourceIdentifier": "security@wordfence.com", "vulnStatus": "Deferred", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-639"}], "source": "security@wordfence.com", "type": "Primary"}]}

{}

{"affected": [{"configurations": [{"platform": null, "status": "affected", "versions": {"scheme": "semver", "value": "[0,2.0.11]"}}], "enrichment": {"confidence": 100.0, "confidence_source": "cna", "scores": [{"score": 100.0, "source": "cna"}]}, "original": {"product": "Fluent Boards Pro", "source": "cna", "vendor": "Fluent Boars"}, "product": "fluent_boards_pro", "vendor": "fluent_boars"}, {"configurations": [{"platform": null, "status": "unaffected", "versions": null}], "enrichment": {"confidence": 80.0, "confidence_source": "inferred", "scores": [{"score": 80.0, "source": "inferred"}, {"score": 100.0, "source": "matching"}]}, "product": "wordpress", "vendor": "wordpress"}], "created": "2026-08-25T06:45:03.930193+00:00", "updated": "2026-08-28T20:38:14.036316+00:00", "vendors": ["fluent_boars", "fluent_boars$PRODUCT$fluent_boards_pro", "wordpress", "wordpress$PRODUCT$wordpress"]}