Live › vulnerability › CVE-2026-111836
Go to dashboardFluentCommunity, a WordPress community plugin by ManageNinja, has an access control flaw where a missing authorization check lets actions run without the right permissions. The sources say the affected range runs through version 2.11.0 but do not say which actions or what data an attacker can reach.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-10-23 21:57 UTC. All times on this page are UTC.
Sites running the FluentCommunity plugin at version 2.11.0 or earlier are in the affected range. The sources do not say which roles or endpoints are involved, so whether a logged-out visitor can reach the flaw is unknown. Sites without the plugin installed are not affected.
No product ranges from the sources yet.
wp plugin get fluent-community --field=version2.11.02.11.0, as published by the vendor (the fixed version number is unknown from the sources)Each row is the first time that source carried this signal. The analyst’s rows are its own findings.
Missing Authorization vulnerability in WP ManageNinja LLC FluentCommunity fluent-community allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects FluentCommunity: from n/a through 2.11.0.
This page as .md · .json · in your agent: get_signal("CVE-2026-111836")
NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.