Fluentboards (Unknown) - vulnerabilities (CVEs)

5 CVEs, 0 in the last 30 days, 1 known versions, newest CVE from 2026-09-23. Vendor: Unknown.

CVEs of Fluentboards

• CVE-2026-89331 - CVSS 5.3 (medium), 2026-09-23: The FluentBoards WordPress plugin before 2.1.0 does not properly restrict the member data returned by its public, token-shared board feature, allowing…
• CVE-2026-89328 - CVSS 3.8 (low), 2026-09-16: The FluentBoards WordPress plugin before 2.0.15 does not properly verify that a user holds board-manager privileges before performing several board-management…
• CVE-2026-89327 - CVSS 3.8 (low), 2026-09-16: The FluentBoards WordPress plugin before 2.0.15 does not verify that a board member submitting a comment is the user the comment is attributed to, allowing…
• CVE-2026-85349 - CVSS 4.3 (medium), 2026-09-16: The FluentBoards WordPress plugin before 2.0.15 does not properly verify authorization when returning the list of boards a user belongs to, allowing any…
• CVE-2026-14938 - CVSS 4.3 (medium), 2026-08-02: The FluentBoards WordPress plugin before 1.95.3 does not verify that the items selected for a board import operation belong to a board the requesting user is…