---
id: CVE-2026-107913
title: >-
  Rejected reason: This CVE ID is a duplicate of CVE-2026-39749 and was never
  published
summary: >-
  Rejected reason: This CVE ID is a duplicate of CVE-2026-39749 and was never
  published. Both IDs were assigned to the same Broken Access Control
  vulnerability in the App for Cloudflare WordPress plugin. All CVE users should
  reference CVE-…
severity: none
published: '2026-10-14'
updated: '2026-10-14'
sourceUpdated: '2026-10-14T11:17:02.887'
source: NVD
sourceUrl: 'https://nvd.nist.gov/vuln/detail/CVE-2026-107913'
tags:
  - nvd
ingestedAt: '2026-10-14T11:27:22.144Z'
---

## Overview

Rejected reason: This CVE ID is a duplicate of CVE-2026-39749 and was never published. Both IDs were assigned to the same Broken Access Control vulnerability in the App for Cloudflare WordPress plugin. All CVE users should reference CVE-2026-39749 instead of this ID.

## Remediation

Refer to the linked advisories for vendor-supplied fixes and affected version ranges.