{"api_version":"1","generated_at":"2026-10-14T18:32:56+00:00","cve":"CVE-2026-107913","urls":{"html":"https://cve.report/CVE-2026-107913","api":"https://cve.report/api/cve/CVE-2026-107913.json","docs":"https://cve.report/api","cve_org":"https://www.cve.org/CVERecord?id=CVE-2026-107913","nvd":"https://nvd.nist.gov/vuln/detail/CVE-2026-107913"},"summary":{"title":"CVE-2026-107913","description":"Rejected reason: This CVE ID is a duplicate of CVE-2026-39749 and was never published. Both IDs were assigned to the same Broken Access Control vulnerability in the App for Cloudflare WordPress plugin. All CVE users should reference CVE-2026-39749 instead of this ID.","state":"REJECTED","assigner":"WPScan","published_at":"2026-10-14 11:17:02","updated_at":"2026-10-14 11:17:02"},"problem_types":[],"metrics":[],"references":[{"url":"https://www.cve.org/CVERecord?id=CVE-2026-107913","name":"CVE Program record","refsource":"CVE.ORG","tags":["canonical"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-107913","name":"NVD vulnerability detail","refsource":"NVD","tags":["canonical","analysis"]}],"affected":[],"timeline":[],"solutions":[],"workarounds":[],"exploits":[],"credits":[],"nvd_cpes":[],"vendor_comments":[],"enrichments":{"kev":null,"epss":null,"legacy_qids":[]},"source_records":{"cve_program":{"containers":{"cna":{"providerMetadata":{"dateUpdated":"2026-10-14T11:10:42.701Z","orgId":"1bfdd5d7-9bf6-4a53-96ea-42e2716d7a81","shortName":"WPScan"},"rejectedReasons":[{"lang":"en","value":"This CVE ID is a duplicate of CVE-2026-39749 and was never published. Both IDs were assigned to the same Broken Access Control vulnerability in the App for Cloudflare WordPress plugin. All CVE users should reference CVE-2026-39749 instead of this ID."}]}},"cveMetadata":{"assignerOrgId":"1bfdd5d7-9bf6-4a53-96ea-42e2716d7a81","assignerShortName":"WPScan","cveId":"CVE-2026-107913","dateRejected":"2026-10-14T11:10:42.701Z","dateReserved":"2026-10-09T05:11:02.131Z","dateUpdated":"2026-10-14T11:10:42.701Z","state":"REJECTED"},"dataType":"CVE_RECORD","dataVersion":"5.2"},"nvd":{"publishedDate":"2026-10-14 11:17:02","lastModifiedDate":"2026-10-14 11:17:02","problem_types":[],"metrics":[],"configurations":[]},"legacy_mitre":{"record":{"CveYear":"2026","CveId":"107913","Ordinal":"1","Title":"CVE-2026-107913","CVE":"CVE-2026-107913","Year":"2026"},"notes":[{"CveYear":"2026","CveId":"107913","Ordinal":"1","NoteData":"Rejected reason: This CVE ID is a duplicate of CVE-2026-39749 and was never published. Both IDs were assigned to the same Broken Access Control vulnerability in the App for Cloudflare WordPress plugin. All CVE users should reference CVE-2026-39749 instead of this ID.","Type":"Description","Title":"CVE-2026-107913"}]}}}