All vulnerabilities
CVE-2026-107913

Rejected: This CVE ID is a duplicate of CVE-2026-39749 and was never published. Both IDs were assigned to the same Broken Access Control vulnerability in the App for Cloudflare WordPress plu

Unknown productApplications & CMS
Open in ThreatlineRecord JSON
CVSS
NoneNot scored
ExploitationNo known exploitationNot in CISA KEV, which does not prove it is unexploitedCISA KEV
Exploit odds (EPSS)No scoreNo FIRST EPSS score in this snapshot yet
Fixed inNone listedNo source names a fixed version yet
PublishedunknownUpdated 14 Oct 2026CVE List

What fixes it

No source in this snapshot names a fixed version.