CVE-2026-89327
FluentBoards < 2.0.15 - Board Member+ Comment Author Spoofing via 'comment_by' Parameter
CVSS Score
3.8
EPSS Score
0.2%
EPSS Percentile
6th
The FluentBoards WordPress plugin before 2.0.15 does not verify that a board member submitting a comment is the user the comment is attributed to, allowing any board member to post comments that appear to be authored by another user, including administrators.
| Vendor | unknown |
| Product | fluentboards |
| Published | Sep 16, 2026 |
| Last Updated | Sep 17, 2026 |
Stay Ahead of the Next One
Get instant alerts for unknown fluentboards
Be the first to know when new low vulnerabilities affecting unknown fluentboards are published — delivered to Slack, Telegram or Discord.
Get Free Alerts →
Free · No credit card · 60 sec setup
Affected Versions
Unknown / FluentBoards
0 < 2.0.15
References
Credits
vuxvinh WPScan