Kboard

1 CVEs product

Monthly

Sort: Newest CVSS Score EPSS Score Oldest

CVE-2026-88910 Sep 16, 06:00 POC PATCH This Week

The kboard WordPress plugin before 6.7 does not verify ownership or context before deleting board media, allowing unauthenticated attackers to permanently delete its uploaded media files and their database records by iterating identifiers.

WordPress Information Disclosure Kboard

NVD WPScan

EPSS

0.2%

CVE-2026-88910

EPSS 0%

POC PATCH This Week

The kboard WordPress plugin before 6.7 does not verify ownership or context before deleting board media, allowing unauthenticated attackers to permanently delete its uploaded media files and their database records by iterating identifiers.

WordPress Information Disclosure Kboard

NVD WPScan

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy