A vulnerability identified as CVE-2026-78274 affects Fluent Boards Pro plugin versions up to and including 2.0.11 for WordPress. The flaw allows users with Editor-level privileges to perform arbitrary file uploads, potentially enabling remote code execution or other malicious actions on the affected WordPress site. The vulnerability was disclosed via the National Vulnerability Database (NVD) and documented by Patchstack. Organizations running Fluent Boards Pro at or below version 2.0.11 are advised to update immediately. The criticality is rated High given the potential for unauthorized file uploads leading to server compromise. No active exploitation details are provided in the current disclosure, but the nature of arbitrary file upload vulnerabilities makes them high-risk. WordPress site administrators should apply the latest patch as soon as it becomes available.
