Insufficient Verification of Data Authenticity vulnerability in WP ManageNinja LLC FluentAuth allows Identity Spoofing. This issue affects FluentAuth: from n/a through 2.1.2.

中危 CVSS 5.3

CVECVE-2026-78296

首次发现2026-09-18 00:31 UTC

披露时间2026-09-17 12:18 UTC

最后更新2026-09-18 00:31 UTC

通道状态auto

摘要

Insufficient Verification of Data Authenticity vulnerability in WP ManageNinja LLC FluentAuth allows Identity Spoofing. This issue affects FluentAuth: from n/a through 2.1.2.

中文摘要建设中，暂以英文摘要呈现（DR-003 v2）。

深度研判

该漏洞尚未生成深度研判报告（DR-003 v2 AI pipeline 建设中）。

数据来源

NVD DATABASE

原始链接

https://patchstack.com/database/wordpress/plugin/fluent-security/vulnerability/wordpress-fluentauth-plugin-3-0-0-authentication-bypass-to-account-takeover-vulnerability?_s_id=cve

时间线

2026-09-18 nvd_ingest NVD