4.3
Moyenne
CVE-2026-14938 The FluentBoards WordPress plugin before 1.95.3 does not verify that the items selected for a board import operation…
Description
The FluentBoards WordPress plugin before 1.95.3 does not verify that the items selected for a board import operation belong to a board the requesting user is authorized to access, allowing any authenticated user with member access to a single board to copy and read the stages and tasks (including titles, descriptions and file attachments) of any other board on the site.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| FluentBoards 1.95 | premières → < 1.95.3 | 1.95.3 |
Autres CVE de FluentBoards
Les 5 CVE de FluentBoards →
CVE-2026-89331
The FluentBoards WordPress plugin before 2.1.0 does not properly restrict the member data returned by its public,…
5.3
Moyenne
CVE-2026-89328
The FluentBoards WordPress plugin before 2.0.15 does not properly verify that a user holds board-manager privileges…
3.8
Faible
CVE-2026-89327
The FluentBoards WordPress plugin before 2.0.15 does not verify that a board member submitting a comment is the user…
3.8
Faible
CVE-2026-85349
The FluentBoards WordPress plugin before 2.0.15 does not properly verify authorization when returning the list of…
4.3
Moyenne