Subscriber Privilege Escalation in FluentBoards by FluentPro
CVE-2026-96821

6.3MEDIUM

Key Information:

Vendor

WordPress
Status
Fluentboards
Vendor
CVE Published:
30 September 2026

What is CVE-2026-96821?

FluentBoards versions up to 2.0.12 are susceptible to a Subscriber Privilege Escalation vulnerability. This issue allows unauthorized users to gain elevated privileges, potentially leading to unauthorized access to sensitive information or administrative functions within the WordPress environment. It is crucial for users to update their installations promptly to mitigate risks associated with this vulnerability.

Affected Version(s)

FluentBoards <= 2.0.12

References

https://patchstack.com/database/wordpress/plugin/fluent-b...
vdb-entry

CVSS V3.1

Score:
6.3
Severity:
MEDIUM
Confidentiality:
Low
Integrity:
Low
Availability:
Low
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

Asim Alshaya | Patchstack Bug Bounty Program
.