Information Disclosure in FluentBoards WordPress Plugin by Fluent
CVE-2026-89331
Currently unrated
Key Information:
- Vendor
WordPress
- Status
- Vendor
- CVE Published:
- 23 September 2026
Badges
👾 Exploit Exists🟡 Public PoC
What is CVE-2026-89331?
The FluentBoards WordPress plugin prior to version 2.1.0 has a security flaw that allows unauthenticated users to access member information from public, token-shared boards. This vulnerability enables the exposure of email addresses associated with the board's members, including potentially sensitive user data such as administrator emails, posing a risk to user privacy and security.
Affected Version(s)
FluentBoards 1.95 < 2.1.0
Exploit Proof of Concept (PoC)
PoC code is written by security researchers to demonstrate the vulnerability can be exploited. PoC code is also a key component for weaponization which could lead to ransomware.