CVE-2026-109696

The FluentBoards plugin for WordPress (developed by WP ManageNinja LLC) is vulnerable to a Broken Access Control issue (CWE-862) in versions up to and including 2.1.0 . The root cause is incorrectly configured access control security levels , which allows for missing authorization . This vulnerab...

WordPress FluentBoards plugin <= 2.1.0 - Broken Access Control vulnerability

Broken Access Control vulnerability discovered by Hamza Tlili in WordPress Plugin FluentBoards versions = 2.1.0...

CVE-2026-109696: Missing Authorization

Missing Authorization vulnerability in WP ManageNinja LLC FluentBoards fluent-boards allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects FluentBoards: from n/a through 2.1.0...

CVE-2026-96821

Subscriber Privilege Escalation in FluentBoards = 2.0.12 versions...

CVE-2026-96821 WordPress FluentBoards plugin <= 2.0.12 - Privilege Escalation vulnerability

Subscriber Privilege Escalation in FluentBoards = 2.0.12 versions...

EUVD-2026-89874

Subscriber Privilege Escalation in FluentBoards = 2.0.12 versions...

CVE-2026-96821 WordPress FluentBoards plugin <= 2.0.12 - Privilege Escalation vulnerability

Subscriber Privilege Escalation in FluentBoards = 2.0.12 versions...

CVE-2026-96821

The FluentBoards plugin for WordPress versions

PT-2026-103206

Subscriber Privilege Escalation in FluentBoards = 2.0.12 versions...

CVE-2026-96821: Incorrect Privilege Assignment

Subscriber Privilege Escalation in FluentBoards = 2.0.12 versions...

WordPress FluentBoards plugin <= 2.0.12 - Privilege Escalation vulnerability

Privilege Escalation vulnerability discovered by Asim Alshaya in WordPress Plugin FluentBoards versions = 2.0.12...

CVE-2026-89331

The FluentBoards WordPress plugin before 2.1.0 does not properly restrict the member data returned by its public, token-shared board feature, allowing unauthenticated users to disclose the email addresses of a shared board's members, typically including administrators...

WordPress FluentBoards plugin 1.95-2.0.15 - Unauthenticated Board Member Email Address Disclosure vulnerability

Unauthenticated Board Member Email Address Disclosure vulnerability discovered by vuxvinh in WordPress Plugin FluentBoards versions 1.95-2.0.15...

CVE-2026-89331

The FluentBoards WordPress plugin (versions 1.95-2.0.15 ) is vulnerable to an unauthenticated board member email address disclosure vulnerability. The flaw exists because the plugin fails to properly restrict member data returned by its public, token-shared board feature . This allows unauthentic...

EUVD-2026-85053

The FluentBoards WordPress plugin before 2.1.0 does not properly restrict the member data returned by its public, token-shared board feature, allowing unauthenticated users to disclose the email addresses of a shared board's members, typically including administrators...

CVE-2026-89331 FluentBoards 1.95 - 2.0.15 - Unauthenticated Board Member Email Address Disclosure via Public Board Endpoints

The FluentBoards WordPress plugin before 2.1.0 does not properly restrict the member data returned by its public, token-shared board feature, allowing unauthenticated users to disclose the email addresses of a shared board's members, typically including administrators...

CVE-2026-89331 FluentBoards 1.95 - 2.0.15 - Unauthenticated Board Member Email Address Disclosure via Public Board Endpoints

The FluentBoards WordPress plugin before 2.1.0 does not properly restrict the member data returned by its public, token-shared board feature, allowing unauthenticated users to disclose the email addresses of a shared board's members, typically including administrators...

CVE-2026-89331: Exposure of Sensitive Information to an Unauthorized Actor

The FluentBoards WordPress plugin before 2.1.0 does not properly restrict the member data returned by its public, token-shared board feature, allowing unauthenticated users to disclose the email addresses of a shared board's members, typically including administrators...

PT-2026-97190

Name of the Vulnerable Software and Affected Versions FluentBoards WordPress plugin versions prior to 2.1.0 Description The public, token-shared board feature fails to properly restrict the member data it returns. This allows unauthenticated users to disclose the email addresses of members...

CVE-2026-89327

The FluentBoards WordPress plugin before 2.0.15 does not verify that a board member submitting a comment is the user the comment is attributed to, allowing any board member to post comments that appear to be authored by another user, including administrators...