CVE-2026-39789
Received Received - Intake

Unauthenticated Broken Access Control in Fluent Affiliate Pro

Publication date: 2026-10-06

Last updated on: 2026-10-06

Assigner: Patchstack

Description
Unauthenticated Broken Access Control in Fluent Affiliate Pro <= 1.6.4 versions.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-10-06
Last Modified
2026-10-06
Generated
2026-10-06
AI Q&A
2026-10-06
EPSS Evaluated
N/A
NVD
CVE-2026-39789
EUVD
EUVD-2026-92956

Affected Vendors & Products

Showing 1 associated CPE
Vendor Product Version / Range
WP Manage Ninja Fluent Affiliate Pro n/a

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-862 The product does not perform an authorization check when an actor attempts to access a resource or perform an action.

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

CVE-2026-39789 is an Unauthenticated Broken Access Control vulnerability in Fluent Affiliate Pro plugin versions 1.6.4 and earlier. It allows unauthenticated users to access restricted pages or perform unauthorized actions without needing to log in.

Detection Guidance

Check if the Fluent Affiliate Pro plugin version is 1.6.4 or earlier. Use commands like 'wp plugin list' in WordPress CLI or inspect the plugin files in /wp-content/plugins/fluent-affiliate-pro/. Look for unauthorized access attempts in server logs or WordPress activity logs.

Impact Analysis

This vulnerability could expose sensitive data by allowing unauthorized access to restricted pages or actions. Attackers might exploit it to view or manipulate data they shouldn't have access to, potentially leading to data breaches or other security incidents.

Compliance Impact

This vulnerability could lead to unauthorized access to sensitive data, which may violate compliance requirements under GDPR and HIPAA. Unauthenticated access to restricted pages or actions could expose personal or health-related information, risking data breaches and non-compliance with privacy regulations.

Mitigation Strategies

Update the Fluent Affiliate Pro plugin to version 1.6.5 or later immediately. If updating is not possible, seek help from a hosting provider or web developer. Enable auto-updates for vulnerable plugins if using Patchstack.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-39789. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart