Vulnerabilities

TI-2026-63883 CVE-2026-96821 · GHSA-2vhg-jfhv-gmpc

WordPress FluentBoards plugin <= 2.0.12 - Privilege Escalation vulnerability

LOW 30

Subscriber Privilege Escalation in FluentBoards <= 2.0.12 versions.

CVSS 3.1MEDIUM 6.3 Network Low privileges No interaction EPSS 0.00242 Published 2026-09-30 No fix listed CWE-266

TI-2026-46691 CVE-2026-65521 · GHSA-fp8x-98xr-58r9

WordPress WP Social Ninja plugin <= 4.3.0 - Sensitive Data Exposure vulnerability

LOW 30

Unauthenticated Sensitive Data Exposure in WP Social Ninja <= 4.3.0 versions.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.0033 Published 2026-07-23 No fix listed CWE-497

TI-2026-29452 CVE-2026-40784 · GHSA-x75g-qm53-h84r

WordPress FluentBoards plugin <= 1.91.2 - Insecure Direct Object References (IDOR) vulnerability

LOW 34

Authorization Bypass Through User-Controlled Key vulnerability in Mahmudul Hasan Arif FluentBoards fluent-boards allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects FluentBoards: fr…

CVSS 3.1HIGH 8.1 Network Low privileges No interaction EPSS 0.00168 Published 2026-04-15 No fix listed CWE-639

TI-2026-19801 CVE-2026-24561 · GHSA-f92q-3x4f-6fg8

WordPress FluentBoards plugin <= 1.91.1 - Broken Access Control vulnerability

LOW 24

Missing Authorization vulnerability in Mahmudul Hasan Arif FluentBoards fluent-boards allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects FluentBoards: from n/a through <= 1.91.1.

CVSS 3.1MEDIUM 5.4 Network Low privileges No interaction EPSS 0.00295 Published 2026-01-23 No fix listed CWE-862

TI-2025-39808 CVE-2025-64375 · GHSA-hghr-9h74-29qx

WordPress WP Social Ninja plugin <= 3.20.1 - Broken Access Control vulnerability

LOW 34

Missing Authorization vulnerability in Mahmudul Hasan Arif WP Social Ninja wp-social-reviews allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WP Social Ninja: from n/a through <=…

CVSS 3.1MEDIUM 6.5 Network No auth No interaction EPSS 0.00226 Published 2025-12-18 No fix listed CWE-862

TI-2025-36450 CVE-2025-58797 · GHSA-3737-h86j-c345

WordPress Ninja Charts plugin <= 3.3.5 - Sensitive Data Exposure vulnerability

LOW 24

Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in Mahmudul Hasan Arif Ninja Charts ninja-charts allows Retrieve Embedded Sensitive Data.This issue affects Ninja Charts: from n/a…

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00306 Published 2025-09-05 No fix listed CWE-497

TI-2025-31947 CVE-2025-50034 · GHSA-667j-9284-r387

WordPress Enhanced Blocks – Page Builder Blocks for Gutenberg plugin <= 1.4.1 - Broken Access Control Vulnerability

LOW 29

Missing Authorization vulnerability in Mahmudul Hasan Arif Enhanced Blocks – Page Builder Blocks for Gutenberg enhanced-blocks allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects En…

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.00315 Published 2025-06-20 No fix listed CWE-862

TI-2025-26293 CVE-2025-39551 · GHSA-4wcc-xwq3-8v2h

WordPress FluentBoards plugin <= 1.47 - PHP Object Injection Vulnerability

MEDIUM 50

Deserialization of Untrusted Data vulnerability in Mahmudul Hasan Arif FluentBoards fluent-boards allows Object Injection.This issue affects FluentBoards: from n/a through <= 1.47.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00537 Published 2025-04-17 No fix listed CWE-502

Vulnerabilities

Filters