Live Vulnerability Intelligence
Threat Database
Search CVEs, inspect descriptions, and open detail pages with AI-assisted technical context.
Threat Entry
Updated 2026-09-30
FluentBoards - Security Vulnerability (CVE-2026-96821)
Subscriber Privilege Escalation in FluentBoards
PLUGIN
FluentBoards
CVE-2026-96821
Risk Score
Threat Entry
Updated 2026-09-23
FluentBoards - Security Vulnerability (CVE-2026-89331)
The FluentBoards WordPress plugin before 2.1.0 does not properly restrict the member data returned by its public, token-shared board feature, allowing unauthenticated users to disclose the email addresses of a shared board's members, typically including administrators.
PLUGIN
FluentBoards
CVE-2026-89331
Risk Score
Threat Entry
Updated 2026-09-17
FluentBoards - Security Vulnerability (CVE-2026-89328)
The FluentBoards WordPress plugin before 2.0.15 does not properly verify that a user holds board-manager privileges before performing several board-management operations, checking only board membership. This allows any member of a board to carry out manager-only actions on it, including adding or removing members and enabling public access to a private board.
PLUGIN
FluentBoards
CVE-2026-89328
Risk Score
Threat Entry
Updated 2026-09-17
FluentBoards - Security Vulnerability (CVE-2026-89327)
The FluentBoards WordPress plugin before 2.0.15 does not verify that a board member submitting a comment is the user the comment is attributed to, allowing any board member to post comments that appear to be authored by another user, including administrators.
PLUGIN
FluentBoards
CVE-2026-89327
Risk Score
Threat Entry
Updated 2026-09-17
FluentBoards - Security Vulnerability (CVE-2026-85349)
The FluentBoards WordPress plugin before 2.0.15 does not properly verify authorization when returning the list of boards a user belongs to, allowing any authenticated user, including a Subscriber with no board access, to disclose the private board memberships of arbitrary users by referencing their user ID.
PLUGIN
FluentBoards
CVE-2026-85349
Risk Score
Threat Entry
Updated 2026-08-26
FluentBoards - Security Vulnerability (CVE-2026-14938)
The FluentBoards WordPress plugin before 1.95.3 does not verify that the items selected for a board import operation belong to a board the requesting user is authorized to access, allowing any authenticated user with member access to a single board to copy and read the stages and tasks (including titles, descriptions and file attachments) of any other board on the site.
PLUGIN
FluentBoards
CVE-2026-14938
Risk Score