UNKNOWN NVD

CVE-2026-89328

The FluentBoards WordPress plugin before 2.0.15 does not properly verify that a user holds board-manager privileges before performing several board-management

The FluentBoards WordPress plugin before 2.0.15 does not properly verify that a user holds board-manager privileges before performing several board-management operations, checking only board membership. This allows any member of a board to carry out manager-only actions on it, including adding or removing members and enabling public access to a private board.

References

https://wpscan.com/vulnerability/07c4ebd6-1cf9-4951-a89b-4288d10b0df1/

Published: 2026-09-16 · Source: NVD · Feed updated: 2026-09-16

This unknown severity vulnerability was published on 2026-09-16 via NVD.

vulnfeed aggregates 14123 vulnerabilities from NVD, CISA KEV, Ubuntu, Debian, Red Hat, Kubernetes, Exploit-DB, OSS-Security, GitHub and OpenStack — updated every 4 hours.