CVE-2026-39789

Unauthenticated Broken Access Control in Fluent Affiliate Pro <= 1.6.4 versions.

Credits

Ananda Dhakal (Patchstack) | Patchstack Bug Bounty Program

References

https://patchstack.com/database/wordpress/plugin/fluent-affiliate-pro/vulnerability/wordpress-fluent-affiliate-pro-plugin-1-6-4-broken-access-control-vulnerability?_s_id=cve