5.3
Medium
CVE-2026-89331 The FluentBoards WordPress plugin before 2.1.0 does not properly restrict the member data returned by its public,…
Description
The FluentBoards WordPress plugin before 2.1.0 does not properly restrict the member data returned by its public, token-shared board feature, allowing unauthenticated users to disclose the email addresses of a shared board's members, typically including administrators.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| FluentBoards 1.95 | 1.95 → < 2.1.0 | 2.1.0 |
Other CVEs of FluentBoards
The 5 CVEs of FluentBoards →
CVE-2026-89328
The FluentBoards WordPress plugin before 2.0.15 does not properly verify that a user holds board-manager privileges…
3.8
Low
CVE-2026-89327
The FluentBoards WordPress plugin before 2.0.15 does not verify that a board member submitting a comment is the user…
3.8
Low
CVE-2026-85349
The FluentBoards WordPress plugin before 2.0.15 does not properly verify authorization when returning the list of…
4.3
Medium
CVE-2026-14938
The FluentBoards WordPress plugin before 1.95.3 does not verify that the items selected for a board import operation…
4.3
Medium