PT-2026-93296 · WordPress · Fluentboards
CVSS v3.1
4.3
متوسطة
| المتجه | AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N |
Name of the Vulnerable Software and Affected Versions
FluentBoards WordPress plugin versions prior to 2.0.15
Description
An authorization bypass exists when the plugin returns the list of boards associated with a user. This allows any authenticated user, such as a Subscriber without board access, to disclose private board memberships of other users by referencing their
user ID.Recommendations
Update FluentBoards WordPress plugin to version 2.0.15 or later.
استغلال
إصلاح
Information Disclosure
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾
تصنيف نقاط الضعف
المعرّفات ذات الصلة
المنتجات المتأثرة
Fluentboards