{"dataType":"CVE_RECORD","dataVersion":"5.2","cveMetadata":{"cveId":"CVE-2026-107913","assignerOrgId":"1bfdd5d7-9bf6-4a53-96ea-42e2716d7a81","state":"REJECTED","dateReserved":"2026-10-09T05:11:02.131Z","dateUpdated":"2026-10-14T11:10:42.701Z","dateRejected":"2026-10-14T11:10:42.701Z","assignerShortName":"WPScan"},"containers":{"cna":{"providerMetadata":{"orgId":"1bfdd5d7-9bf6-4a53-96ea-42e2716d7a81","shortName":"WPScan","dateUpdated":"2026-10-14T11:10:42.701Z"},"rejectedReasons":[{"lang":"en","value":"This CVE ID is a duplicate of CVE-2026-39749 and was never published. Both IDs were assigned to the same Broken Access Control vulnerability in the App for Cloudflare WordPress plugin. All CVE users should reference CVE-2026-39749 instead of this ID."}]}}}