Vulnerability in Fluentboards
CVE-2026-89327
The FluentBoards WordPress plugin before 2.0.15 does not verify that a board member submitting a comment is the user the comment is attributed to, allowing any board member to post comments that appear to be authored by another user, including administrators.
Affected products
- Unknown Fluentboards
References
- contact@wpscan.com (technical-description, exploit, vdb-entry)