CVE-2026-89331 — FluentBoards 1.95 - 2.0.15 - Unauthenticated Board Member Email Address Disclosure via Public Board Endpoints
The FluentBoards WordPress plugin before 2.1.0 does not properly restrict the member data returned by its public, token-shared board feature, allowing unauthenticated users to …
Published: 2026-09-23 · CVSS: 5.3 · CVSS 3.1
The FluentBoards WordPress plugin before 2.1.0 does not properly restrict the member data returned by its public, token-shared board feature, allowing unauthenticated users to disclose the email addresses of a shared board's members, typically including administrators.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7