Diogo Pinto

**Name of the Vulnerable Software and Affected Versions** FluentBoards versions prior to 1.95.3 **Description** An Insecure Direct Object Reference (IDOR) exists where the plugin fails to verify if the items selected during a board import operation belong to a board the requesting user is authorized to access. This allows any authenticated user with member access to a single board to copy and read the stages and tasks of any other board on the site, including titles, descriptions, and file attachments. **Recommendations** Update FluentBoards to version 1.95.3 or later.

**Name of the Vulnerable Software and Affected Versions** FluentCart A New Era of eCommerce WordPress plugin versions prior to 1.5.3 **Description** Insufficient authorization and ownership checks occur when rendering customer order documents that use a sequential numeric identifier. This allows unauthenticated visitors to enumerate and disclose sensitive customer personal data, including names, email addresses, billing and shipping postal addresses, and order details. **Recommendations** Update the plugin to version 1.5.3 or later.