Privilege Escalation in FluentBoards WordPress Plugin
CVE-2026-89328
Currently unrated
Key Information:
- Vendor
WordPress
- Status
- Vendor
- CVE Published:
- 16 September 2026
Badges
👾 Exploit Exists🟡 Public PoC
What is CVE-2026-89328?
The FluentBoards WordPress plugin prior to version 2.0.15 is susceptible to privilege escalation due to improper verification of user permissions. Specifically, it fails to ensure that users possess the necessary board-manager privileges before allowing them to execute critical board-management tasks. This vulnerability exposes boards to unauthorized manipulation by any member, enabling them to carry out sensitive operations such as adjusting member roles and altering privacy settings of boards.
Affected Version(s)
FluentBoards 0 < 2.0.15
Exploit Proof of Concept (PoC)
PoC code is written by security researchers to demonstrate the vulnerability can be exploited. PoC code is also a key component for weaponization which could lead to ransomware.