5.3
Moyenne
CVE-2026-89331 The FluentBoards WordPress plugin before 2.1.0 does not properly restrict the member data returned by its public,…
Description
The FluentBoards WordPress plugin before 2.1.0 does not properly restrict the member data returned by its public, token-shared board feature, allowing unauthenticated users to disclose the email addresses of a shared board's members, typically including administrators.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| FluentBoards 1.95 | 1.95 → < 2.1.0 | 2.1.0 |
Autres CVE de FluentBoards
Les 5 CVE de FluentBoards →
CVE-2026-89328
The FluentBoards WordPress plugin before 2.0.15 does not properly verify that a user holds board-manager privileges…
3.8
Faible
CVE-2026-89327
The FluentBoards WordPress plugin before 2.0.15 does not verify that a board member submitting a comment is the user…
3.8
Faible
CVE-2026-85349
The FluentBoards WordPress plugin before 2.0.15 does not properly verify authorization when returning the list of…
4.3
Moyenne
CVE-2026-14938
The FluentBoards WordPress plugin before 1.95.3 does not verify that the items selected for a board import operation…
4.3
Moyenne