medium5.3
CVE-2026-89331
The FluentBoards WordPress plugin before 2.1.0 does not properly restrict the member data returned by its public, token-shared board feature, allowing unauthen…
Impact
The FluentBoards WordPress plugin before 2.1.0 does not properly restrict the member data returned by its public, token-shared board feature, allowing unauthenticated users to disclose the email addresses of a shared board's members, typically including administrators.
Affected products
| Product | Affected versions |
|---|---|
| FluentBoards WordPress Plugin | before 2.1.0 |
Versions were read from the advisory text. No structured product data has been published for this record yet.