CVE-2026-78274
Received Received - Intake

Editor Arbitrary File Upload in Fluent Boards Pro

Publication date: 2026-08-27

Last updated on: 2026-08-27

Assigner: Patchstack

Description
Editor Arbitrary File Upload in Fluent Boards Pro <= 2.0.11 versions.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-08-27
Last Modified
2026-08-27
Generated
2026-08-27
AI Q&A
2026-08-27
EPSS Evaluated
N/A
NVD
CVE-2026-78274
EUVD
EUVD-2026-66937

Affected Vendors & Products

Showing 1 associated CPE
Vendor Product Version / Range
patchstack fluent_boards_pro to 2.0.11 (inc)

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-434 The product allows the upload or transfer of dangerous file types that are automatically processed within its environment.

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

This vulnerability is an Arbitrary File Upload flaw in the Fluent Boards Pro WordPress plugin versions 2.0.11 and earlier. It allows attackers with Editor or Developer privileges to upload malicious files, such as backdoors, to a website. The flaw has a high CVSS score of 9.1, indicating significant risk.

Detection Guidance

Check if the Fluent Boards Pro plugin version is 2.0.11 or earlier. Use commands like 'wp plugin list' in WordPress CLI or inspect the plugin directory for version details. Monitor for unexpected file uploads or suspicious activity in web directories.

Impact Analysis

Attackers could exploit this to upload malicious files, gaining unauthorized access to your website. This could lead to data breaches, defacement, or further compromise of your systems. The impact includes potential loss of sensitive data and control over your website.

Compliance Impact

This vulnerability could lead to unauthorized file uploads, potentially exposing sensitive data stored on the website. If exploited, it may result in data breaches that violate GDPR or HIPAA requirements for data protection and access controls. Organizations using vulnerable versions may face compliance violations and legal penalties.

Mitigation Strategies

Update the Fluent Boards Pro plugin to version 2.0.12 or later immediately. If updating is not possible, apply the mitigation rule provided by Patchstack or seek help from a hosting provider or web developer to block attacks.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-78274. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart