CVE-2026-109694: WordPress Fluent CRM plugin <= 3.2.5 - Privilege Escalation vulnerability
Published Oct 15, 2026
·Updated
Incorrect Privilege Assignment vulnerability in WP ManageNinja LLC Fluent CRM fluent-crm allows Privilege Escalation.This issue affects Fluent CRM: from n/a through 3.2.5.
Affected Software
1 affected component
WP ManageNinja LLC Fluent CRM<=3.2.5
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
wordpress/fluent-crmto a version that resolves this vulnerability.Fixed in 3.2.6
Event History
Oct 15, 2026
CVE Published
via MITRE·11:00 AM
Data Sourced
via MITRE·11:00 AM
RemedyDescriptionSeverityWeakness
Frequently Asked Questions
1
Who can exploit this issue?
The CVSS vector indicates exploitation can be performed remotely, requires no privileges or user interaction, and has low attack complexity.
2
What is the potential impact of successful exploitation?
Successful exploitation could allow privilege escalation and affect confidentiality, integrity, and availability at a high level.
3
Which Fluent CRM versions are affected?
The affected range is listed as Fluent CRM versions through 3.2.5. The provided data does not identify a fixed version.