CVE-2026-78271: WordPress FluentCRM Pro plugin <= 3.1.12 - Privilege Escalation vulnerability
Published Aug 27, 2026
·Updated
Editor Privilege Escalation in FluentCRM Pro <= 3.1.12 versions.
Affected Software
1 affected component
FluentCRM FluentCRM Pro (WordPress plugin)<=3.1.12
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
WordPress FluentCRM Proto a version that resolves this vulnerability.Fixed in 3.1.13
Event History
Aug 27, 2026
CVE Published
via MITRE·08:59 AM
Data Sourced
via MITRE·08:59 AM
RemedyDescriptionSeverityWeakness
Data Sourced
via NVD·10:16 AM
DescriptionSeverityWeakness
Frequently Asked Questions
1
What level of access does an attacker need to exploit this issue?
The vulnerability requires high privileges. The reported issue is specifically an editor privilege escalation, so it is relevant where users already hold Editor-level access.
2
Is this exploitable remotely without user interaction?
The vector is network-based and no user interaction is required. However, exploitation still requires high privileges.
3
Which versions are affected?
FluentCRM Pro versions up to and including 3.1.12 are identified as affected.