Critical · 9.8 CVE-2026-109694 EUVD-2026-102007GHSA-4g3p-vxjx-9qr5

WordPress Fluent CRM plugin <= 3.2.5 - Privilege Escalation vulnerability

Published Oct 15, 2026 · Updated Oct 15, 2026 · Assigned by Patchstack

Vendor: WP ManageNinja Product: Fluent CRM

Description

Incorrect Privilege Assignment vulnerability in WP ManageNinja LLC Fluent CRM fluent-crm allows Privilege Escalation.This issue affects Fluent CRM: from n/a through 3.2.5.

Affected products

Vendor	Product	Affected	Fixed
WP ManageNinja	Fluent CRM	≤ 3.2.5	—

References

https://patchstack.com/database/wordpress/plugin/fluent-crm/vulnerability/wordpress-fluent-crm-plugin-3-2-5-privilege-escalation-vulnerability?_s_id=cve vdb-entry