Live › vulnerability › CVE-2026-62141
Fluent CRM, a WordPress plugin by WP ManageNinja, has a missing authorization check in affected versions. The sources say an attacker can exploit incorrectly configured access control levels to reach actions they should not.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-10-30 16:31 UTC. All times on this page are UTC.
Sites running the Fluent CRM WordPress plugin at version 3.2.6 or earlier. The sources say the flaw is in access control configuration, so sites that restrict CRM roles tightly may be less exposed, but the sources do not say which configurations are safe. unknown whether a default install is exposed.
No product ranges from the sources yet.
wp plugin get fluent-crm --field=versionEach row is the first time that source carried this signal. The analyst’s rows are its own findings.
Missing Authorization vulnerability in WP ManageNinja LLC Fluent CRM fluent-crm allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Fluent CRM: from n/a through 3.2.6.
This page as .md · .json · in your agent: get_signal("CVE-2026-62141")
NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.