Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

3 records

Release: FluentBoards 2.0.15 Clear all filters
TI-2026-60459 CVE-2026-89327 · GHSA-44j7-p38f-pr4v

FluentBoards < 2.0.15 - Board Member+ Comment Author Spoofing via 'comment_by' Parameter

Priority LOW 18

The FluentBoards WordPress plugin before 2.0.15 does not verify that a board member submitting a comment is the user the comment is attributed to, allowing any board member to post comments that appear to be authored by…

CVSS 3.1LOW 3.8 Network High privileges No interaction EPSS 0.00255 Published 2026-09-16 Fixed in 2.0.15 CWE-290
TI-2026-58583 CVE-2026-85349 · GHSA-7f4v-rw2p-hvrp

FluentBoards < 2.0.15 - Subscriber+ Private Board Membership Disclosure via IDOR

Priority LOW 20

The FluentBoards WordPress plugin before 2.0.15 does not properly verify authorization when returning the list of boards a user belongs to, allowing any authenticated user, including a Subscriber with no board access, to…

CVSS 3.1MEDIUM 4.3 Network Low privileges No interaction EPSS 0.00295 Published 2026-09-16 Fixed in 2.0.15 CWE-200