CVE-2026-78275: WordPress Fluent Boards Pro plugin <= 2.0.11 - Arbitrary File Deletion vulnerability
Published Aug 27, 2026
·Updated
Editor Arbitrary File Deletion in Fluent Boards Pro <= 2.0.11 versions.
Affected Software
1 affected component
WordPress Fluent Boards Pro<=2.0.11
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
WordPress Fluent Boards Pro pluginto a version that resolves this vulnerability.Fixed in 2.0.12
Event History
Aug 27, 2026
CVE Published
via MITRE·08:59 AM
Data Sourced
via MITRE·08:59 AM
RemedyDescriptionSeverityWeakness
Data Sourced
via NVD·10:16 AM
DescriptionSeverityWeakness
Frequently Asked Questions
1
Who can exploit this issue?
An attacker needs Editor-level privileges in WordPress. The available information does not indicate that unauthenticated users or lower-privileged roles can exploit it.
2
What is the impact of successful exploitation?
A successful attacker can delete arbitrary files through path traversal. The reported impact is availability loss; no confidentiality or integrity impact is listed.
3
Which plugin versions are affected?
Fluent Boards Pro versions 2.0.11 and earlier are affected.