CVE-2026-89328

FluentBoards WordPress plugin before 2.0.15 contains a privilege-verification flaw: certain board-management operations check only board membership rather than requiring board-manager privileges. This allows any member of a board to perform manager-only actions, including adding or removing membe...

EUVD-2026-80195

The FluentBoards WordPress plugin before 2.0.15 does not properly verify authorization when returning the list of boards a user belongs to, allowing any authenticated user, including a Subscriber with no board access, to disclose the private board memberships of arbitrary users by referencing the...

CVE-2026-85349

The FluentBoards WordPress plugin before 2.0.15 contains an Insecure Direct Object Reference (IDOR) flaw in its authorization logic. When returning the list of boards a user belongs to, the plugin fails to properly verify authorization, allowing any authenticated user at Subscriber level or above...