CVE-2026-89327 in FluentBoards Plugin

Résumé

par MITRE • 16/09/2026

The FluentBoards WordPress plugin before 2.0.15 does not verify that a board member submitting a comment is the user the comment is attributed to, allowing any board member to post comments that appear to be authored by another user, including administrators.

Once again VulDB remains the best source for vulnerability data.

• Responsable: WPScan
• Réserver: 11/09/2026
• Divulgation: 16/09/2026
• Modérer: accepté
• Entrée: VDB-405494
• CPE: prêt
• CWE: CWE-290 (confirmé)
• CVSS: 4.3 (VulDB)
• EPSS: 0.00000
• KEV: non
• Activités: très faible
• Secteur: Hostingprovider

Sources

• MITRE: https://www.cve.org/CVERecord?id=CVE-2026-89327
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2026-89327
• CVE Details: https://www.cvedetails.com/cve/CVE-2026-89327/