EUVD-2026-80214
GHSA-44j7-p38f-pr4v
Lifecycle Timeline
2DescriptionCVE.org
The FluentBoards WordPress plugin before 2.0.15 does not verify that a board member submitting a comment is the user the comment is attributed to, allowing any board member to post comments that appear to be authored by another user, including administrators.
Analysis
The FluentBoards WordPress plugin before 2.0.15 does not verify that a board member submitting a comment is the user the comment is attributed to, allowing any board member to post comments that appear to be authored by another user, including administrators.
Unlock full vulnerability intelligence
- Risk assessment & exploitation conditions
- Attack chain visualization
- Remediation with exact patch versions
- Threat intelligence from 22 sources
- Personal watchlist & email alerts
Free forever · No credit card required
Threat intelligence, references, and detailed analysis are available after sign-in.
More in Fluentboards
View allInsecure Direct Object Reference in FluentBoards WordPress plugin before 1.95.3 allows any authenticated user holding me
Authorization bypass in FluentBoards up to 1.91.2 allows authenticated users to access and modify board data belonging t
The FluentBoards WordPress plugin before 2.0.15 does not properly verify that a user holds board-manager privileges bef
The FluentBoards WordPress plugin before 2.0.15 does not properly verify authorization when returning the list of board
Same technique Information Disclosure
View allShare
External POC / Exploit Code
Leaving vuln.today