CVE-2026-89331
FluentBoards 1.95 - 2.0.15 - Unauthenticated Board Member Email Address Disclosure via Public Board Endpoints
CVSS Score
0.0
EPSS Score
0.0%
EPSS Percentile
0th
The FluentBoards WordPress plugin before 2.1.0 does not properly restrict the member data returned by its public, token-shared board feature, allowing unauthenticated users to disclose the email addresses of a shared board's members, typically including administrators.
| Vendor | unknown |
| Product | fluentboards |
| Published | Sep 23, 2026 |
Stay Ahead of the Next One
Get instant alerts for unknown fluentboards
Be the first to know when new unknown vulnerabilities affecting unknown fluentboards are published — delivered to Slack, Telegram or Discord.
Get Free Alerts →
Free · No credit card · 60 sec setup
Affected Versions
Unknown / FluentBoards
1.95 < 2.1.0
References
Credits
vuxvinh WPScan