PT-2026-93296 · WordPress · Fluentboards
CVSS v3.1
4.3
Medium
| Vector | AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N |
Name of the Vulnerable Software and Affected Versions
FluentBoards WordPress plugin versions prior to 2.0.15
Description
An authorization bypass exists when the plugin returns the list of boards associated with a user. This allows any authenticated user, such as a Subscriber without board access, to disclose private board memberships of other users by referencing their
user ID.Recommendations
Update FluentBoards WordPress plugin to version 2.0.15 or later.
Exploit
Fix
Information Disclosure
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Fluentboards