CVE-2026-89327

Name of the Vulnerable Software and Affected Versions FluentBoards WordPress plugin versions prior to 2.0.15

Description Insufficient verification occurs when a board member submits a comment, as the plugin fails to confirm if the submitter is the actual user to whom the comment is attributed. This allows any board member to impersonate other users, including administrators, by posting comments that appear to be authored by them.

Recommendations Update FluentBoards WordPress plugin to version 2.0.15 or later.