SZB-895b00e37f
EUVD lists missing authorization in Fluent CRM through 3.2.6 (EUVD-2026-114129)
- Status
- Unverified: only social posts report this so far
- Kind
- Vulnerability
- Vendor
- ManageNinja
- Product
- Fluent CRM
- First seen
Summary
The EU Vulnerability Database entry EUVD-2026-114129, as shared on Mastodon, describes a missing authorization flaw in Fluent CRM from the unspecified start version through 3.2.6. The entry scores it 5.4/10 (CVSS v3.1) and says it allows exploitation of incorrectly configured access control levels.
If you use ManageNinja
Check whether you run Fluent CRM 3.2.6 or earlier.
Update Fluent CRM to a version later than 3.2.6 when available.
Review user roles and access control settings in the plugin.
What the sources say 1
· Mastodon: “Missing Authorization vulnerability in WP ManageNinja LLC Fluent CRM fluent-crm allows Exploiting Incorrectly Configured Access Control Security Levels.” Source