EUVD-2026-80215
GHSA-q8hc-f88v-p32p
Lifecycle Timeline
2DescriptionCVE.org
The FluentBoards WordPress plugin before 2.0.15 does not properly verify that a user holds board-manager privileges before performing several board-management operations, checking only board membership. This allows any member of a board to carry out manager-only actions on it, including adding or removing members and enabling public access to a private board.
Analysis
The FluentBoards WordPress plugin before 2.0.15 does not properly verify that a user holds board-manager privileges before performing several board-management operations, checking only board membership. This allows any member of a board to carry out manager-only actions on it, including adding or removing members and enabling public access to a private board.
Unlock full vulnerability intelligence
- Risk assessment & exploitation conditions
- Attack chain visualization
- Remediation with exact patch versions
- Threat intelligence from 22 sources
- Personal watchlist & email alerts
Free forever · No credit card required
Threat intelligence, references, and detailed analysis are available after sign-in.
More in Fluentboards
View allInsecure Direct Object Reference in FluentBoards WordPress plugin before 1.95.3 allows any authenticated user holding me
Authorization bypass in FluentBoards up to 1.91.2 allows authenticated users to access and modify board data belonging t
The FluentBoards WordPress plugin before 2.0.15 does not verify that a board member submitting a comment is the user th
The FluentBoards WordPress plugin before 2.0.15 does not properly verify authorization when returning the list of board
Same technique Information Disclosure
View allShare
External POC / Exploit Code
Leaving vuln.today