Skip to content
CVE PROGRAM SOURCE RECORD3.8 Low

CVE-2026-89327

FluentBoards < 2.0.15 - Board Member+ Comment Author Spoofing via 'comment_by' Parameter

Description

The FluentBoards WordPress plugin before 2.0.15 does not verify that a board member submitting a comment is the user the comment is attributed to, allowing any board member to post comments that appear to be authored by another user, including administrators.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Unknown FluentBoards

Default version status: unaffected

  • 0 to < 2.0.15affected

References