WordPress Plugin Vulnerabilities

FluentBoards < 2.0.15 - Subscriber+ Private Board Membership Disclosure via IDOR

Description

The plugin does not properly verify authorization when returning the list of boards a user belongs to, allowing any authenticated user, including a Subscriber with no board access, to disclose the private board memberships of arbitrary users by referencing their user ID.

Proof of Concept

Affects Plugins

Plugin icon
fluent-boards
Fixed in 2.0.15

References

CVE
CVE-2026-85349

Classification

Type
SENSITIVE DATA DISCLOSURE
OWASP top 10
A3: Sensitive Data Exposure
CWE
CWE-200
CVSS
4.3 (medium)

Miscellaneous

Original Researcher
Usama Arshad
Submitter
Usama Arshad
Submitter website
https://www.usamaarshad.me/
Submitter twitter
usama0x01
Verified
Yes
WPVDB ID
6526a9ee-6320-472b-a179-dba009f6d76d

Timeline

Publicly Published
2026-09-14 (about 2 days ago)
Added
2026-09-14 (about 1 day ago)
Last Updated
2026-09-14 (about 1 day ago)

Other

Published
Title
Published
2024-03-06
Title
MasterStudy LMS WordPress Plugin – for Online Courses and Education < 3.2.11 - Basic Information Exposure via REST route
Published
2022-09-14
Title
WP 2FA < 2.3.0 - Time-Based Side-Channel Attack
Published
2026-06-25
Title
Payment Gateway Based Fees and Discounts for WooCommerce < 3.1.0 - Unauthenticated Insecure Direct Object Reference
Published
2024-08-07
Title
Booking for Appointments and Events Calendar – Amelia < 1.2.1 - Unauthenticated Full Path Disclosure
Published
2024-11-14
Title
Essential Addons for Elementor – Best Elementor Addon, Templates, Widgets, Kits & WooCommerce Builders < 6.0.10 - Authenticated (Author+) Sensitive Information Exposure to Privilege Escalation