CVE-2026-111836: WordPress FluentCommunity plugin <= 2.11.0 - Broken Access Control vulnerability
Missing Authorization vulnerability in WP ManageNinja LLC FluentCommunity fluent-community allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects FluentCommunity: from n/a through 2.11.0.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
WordPress FluentCommunity pluginto a version that resolves this vulnerability.Fixed in 2.12.0
Event History
Frequently Asked Questions
Who can exploit this issue?
Exploitation requires an authenticated account with low privileges. No user interaction is required, and the attack can be performed over the network.
Which FluentCommunity versions are affected?
FluentCommunity versions through 2.11.0 are affected. The available information does not identify a fixed version.
What is the likely impact?
The vulnerability may allow unauthorized access to information because confidentiality impact is rated low. No integrity or availability impact is indicated.