CVE-2026-78296

MEDIUM NVD

CVSS Score 5.3

Severity MEDIUM

Published Sep 17, 2026

Vendor unknown

Description

Insufficient Verification of Data Authenticity vulnerability in WP ManageNinja LLC FluentAuth allows Identity Spoofing. This issue affects FluentAuth: from n/a through 2.1.2.

References

https://patchstack.com/database/wordpress/plugin/fluent-security/vulnerability/wordpress-fluentauth-plugin-3-0-0-authentication-bypass-to-account-takeover-vulnerability?_s_id=cve