CVE-2026-78278

Subscriber Insecure Direct Object References IDOR in Fluent Boards Pro = 2.0.11 versions...

CVE-2026-78272

Subscriber Broken Access Control in Fluent Support Pro = 2.3.1 versions...

CVE-2026-78277

Subscriber Server Side Request Forgery SSRF in FluentCRM Pro = 3.1.12 versions...

CVE-2026-28190

Subscriber Broken Access Control in ProLancer Element = 1.4.8 versions...

CVE-2026-32471

Subscriber SQL Injection in ProLancer Element = 1.4.8 versions...

CVE-2026-32478

Subscriber SQL Injection in WP Project Manager Pro = 4.0.1 versions...

EUVD-2026-64802

Subscriber SQL Injection in WP Project Manager Pro = 4.0.1 versions...

CVE-2026-32478 WordPress WP Project Manager Pro plugin <= 4.0.1 - SQL Injection vulnerability

Subscriber SQL Injection in WP Project Manager Pro = 4.0.1 versions...

CVE-2026-32478

CVE-2026-32478 is a Subscriber-level SQL Injection vulnerability in the WP Project Manager Pro WordPress plugin (versions ≤ 4.0.1 ), discovered by researcher dutafi . The flaw allows a user with the low-privilege Subscriber role to execute arbitrary SQL queries, resulting in high confidentiality ...

CVE-2026-32471

ProLancer Element is a WordPress plugin affected by a subscriber-level SQL injection vulnerability in versions 1.4.8 and below . An authenticated subscriber (low privilege) can exploit this remotely over the network with low complexity and no user interaction. The CVSS 3.1 score is 8.5 (HIGH) , w...

EUVD-2026-64799

Subscriber SQL Injection in ProLancer Element = 1.4.8 versions...

CVE-2026-32471 WordPress ProLancer Element plugin <= 1.4.8 - SQL Injection vulnerability

Subscriber SQL Injection in ProLancer Element = 1.4.8 versions...

EUVD-2026-64798

Subscriber Broken Access Control in ProLancer Element = 1.4.8 versions...

CVE-2026-28190

CVE-2026-28190 is a Broken Access Control vulnerability in the ProLancer Element WordPress plugin, affecting versions 1.4.8 and earlier . The flaw allows users with the Subscriber role to perform actions beyond their intended privilege level, resulting in primarily integrity impact and minor avai...

CVE-2026-28190 WordPress ProLancer Element plugin <= 1.4.8 - Broken Access Control vulnerability

Subscriber Broken Access Control in ProLancer Element = 1.4.8 versions...

EUVD-2026-64784

Subscriber Server Side Request Forgery SSRF in FluentCRM Pro = 3.1.12 versions...

EUVD-2026-64785

Subscriber Insecure Direct Object References IDOR in Fluent Boards Pro = 2.0.11 versions...

CVE-2026-78277 WordPress FluentCRM Pro plugin <= 3.1.12 - Server Side Request Forgery (SSRF) vulnerability

Subscriber Server Side Request Forgery SSRF in FluentCRM Pro = 3.1.12 versions...

CVE-2026-78277

FluentCRM Pro , a WordPress plugin, is affected by a Server-Side Request Forgery (SSRF) vulnerability in its Subscriber functionality, impacting versions ≤ 3.1.12 . The vulnerability was discovered by Ananda Dhakal via Patchstack. The CVSS 3.1 score is 4.9 (Medium) , with a network attack vector,...

CVE-2026-78278

Fluent Boards Pro is a WordPress plugin affected by a Subscriber-level Insecure Direct Object Reference (IDOR) vulnerability in versions ≤ 2.0.11 . The flaw is reachable over the network with no privileges required and low attack complexity , allowing an unauthenticated attacker to access objects...