CVE-2026-89331 — FluentBoards 1.95 - 2.0.15 - Unauthenticated Board Member Email Address Disclosure via Public Board Endpoints

CVE-2026-89331

FluentBoards 1.95 - 2.0.15 - Unauthenticated Board Member Email Address Disclosure via Public Board Endpoints PUBLISHED

Description (CNA)

The FluentBoards WordPress plugin before 2.1.0 does not properly restrict the member data returned by its public, token-shared board feature, allowing unauthenticated users to disclose the email addresses of a shared board's members, typically including administrators.

Affected (CNA)

Vendor / product	Versions
Unknown / FluentBoards	affected 1.95 before 2.1.0

CWE

No CWE identifiers supplied.

References

https://wpscan.com/vulnerability/d1aaacdf-7427-411f-b376-999793524a4b/

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.