CVE-2026-89328

3.8 Faible

Publiée le 16/09/2026 à 08:16 · Modifiée le 17/09/2026 à 15:16 · Analyse NVD reportée · Source : contact@wpscan.com

Description

The FluentBoards WordPress plugin before 2.0.15 does not properly verify that a user holds board-manager privileges before performing several board-management operations, checking only board membership. This allows any member of a board to carry out manager-only actions on it, including adding or removing members and enabling public access to a private board.

Traduire en français

Produits concernés

Unknown FluentBoards

Scores CVSS

Version	Score	Source	Vecteur
3.1	3.8 Faible	134c704f-9b21-4f2e-91b3-4a467353bcc0	`CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:N`

Faiblesses (CWE)

CWE-284

Références

https://wpscan.com/vulnerability/07c4ebd6-1cf9-4951-a89b-4288d10b0df1/

Ailleurs

NVD
CVE.org
CIRCL Vulnerability-Lookup
CERT-FR
GitHub Advisories