CVE-2026-89328 — FluentBoards < 2.0.15 - Board Member+ Board Membership and Public Access Modification

CVE-2026-89328

FluentBoards < 2.0.15 - Board Member+ Board Membership and Public Access Modification PUBLISHED

Description (CNA)

The FluentBoards WordPress plugin before 2.0.15 does not properly verify that a user holds board-manager privileges before performing several board-management operations, checking only board membership. This allows any member of a board to carry out manager-only actions on it, including adding or removing members and enabling public access to a private board.

Affected (CNA)

Vendor / product	Versions
Unknown / FluentBoards	affected 0 before 2.0.15

CWE

No CWE identifiers supplied.

References

https://wpscan.com/vulnerability/07c4ebd6-1cf9-4951-a89b-4288d10b0df1/

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.