Plugin icon

FluentBoards – Project Management, Task Management, Goal Tracking, Kanban Board, and, Team Collaboration

fluent-boards

Vulnerabilities:

8

Last Updated:

September 17, 2026

Active Installs:

6000

Published
Title
Fixed in
CVSS
Published
2026-09-21
Title
FluentBoards 1.95 - 2.0.15 - Unauthenticated Board Member Email Address Disclosure via Public Board Endpoints
Fixed in
Fixed in 2.1.0
CVSS
5.3 (medium)
Published
2026-09-14
Title
FluentBoards < 2.0.15 - Subscriber+ Private Board Membership Disclosure via IDOR
Fixed in
Fixed in 2.0.15
CVSS
4.3 (medium)
Published
2026-09-14
Title
FluentBoards < 2.0.15 - Board Member+ Comment Author Spoofing via 'comment_by' Parameter
Fixed in
Fixed in 2.0.15
CVSS
3.8 (low)
Published
2026-09-14
Title
FluentBoards < 2.0.15 - Board Member+ Board Membership and Public Access Modification
Fixed in
Fixed in 2.0.15
CVSS
3.8 (low)
Published
2026-07-20
Title
FluentBoards < 1.95.3 - Subscriber+ Cross-Board Task Disclosure via IDOR
Fixed in
Fixed in 1.95.3
CVSS
4.3 (medium)
Published
2026-04-15
Title
FluentBoards – Project Management, Task Management, Goal Tracking, Kanban Board, and, Team Collaboration < 1.91.3 - Authenticated (Board Member+) Insecure Direct Object Reference
Fixed in
Fixed in 1.91.3
CVSS
4.3 (medium)
Published
2026-01-22
Title
FluentBoards < 1.91.2 - Missing Authorization
Fixed in
Fixed in 1.91.2
CVSS
4.3 (medium)
Published
2025-04-17
Title
FluentBoards < 1.48 - Unauthenticated PHP Object Injection
Fixed in
Fixed in 1.48
CVSS
9.8 (critical)