Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%
Buy Us a Coffee

FluentBoards — Vulnerabilities & Security Advisories 9

All 9 CVE vulnerabilities found in FluentBoards, with AI-generated Chinese analysis, references, and POCs.

Vendor: Mahmudul Hasan Arif

CVE ID Title CVSS Severity Published
CVE-2026-96821 WordPress FluentBoards plugin <= 2.0.12 - Privilege Escalation vulnerability CWE-266 6.3 Medium 2026-09-30
CVE-2026-89331 FluentBoards 1.95 - 2.0.15 - Unauthenticated Board Member Email Address Disclosure via Public Board Endpoints - - 2026-09-23
CVE-2026-89328 FluentBoards < 2.0.15 - Board Member+ Board Membership and Public Access Modification - - 2026-09-16
CVE-2026-89327 FluentBoards < 2.0.15 - Board Member+ Comment Author Spoofing via 'comment_by' Parameter - - 2026-09-16
CVE-2026-85349 FluentBoards < 2.0.15 - Subscriber+ Private Board Membership Disclosure via IDOR - - 2026-09-16
CVE-2026-14938 FluentBoards < 1.95.3 - Subscriber+ Cross-Board Task Disclosure via IDOR - - 2026-08-02
CVE-2026-40784 WordPress FluentBoards plugin <= 1.91.2 - Insecure Direct Object References (IDOR) vulnerability CWE-639 8.1 High 2026-04-15
CVE-2026-24561 WordPress FluentBoards plugin <= 1.91.1 - Broken Access Control vulnerability CWE-862 5.4 Medium 2026-01-23
CVE-2025-39551 WordPress FluentBoards plugin <= 1.47 - PHP Object Injection Vulnerability CWE-502 9.8 Critical 2025-04-17

All 9 known CVE vulnerabilities affecting FluentBoards with full Chinese analysis, references, and POCs where available.