Is CVE-2026-107913 being exploited?

No public exploit is currently tracked.

Back

CVE-2026-107913

Description

Rejected reason: This CVE ID is a duplicate of CVE-2026-39749 and was never published. Both IDs were assigned to the same Broken Access Control vulnerability in the App for Cloudflare WordPress plugin. All CVE users should reference CVE-2026-39749 instead of this ID.