OCTOBER 14, 2026
Live Feed
Back to database
Case File

CVE-2026-89327

LOW · CVSS 3.8 EPSS 0.26%

Source: NVD + CISA KEV + EPSS · Published 2026-09-16 · Last synced 2026-10-13

CyberRota Analysis

AI-Generated

The FluentBoards WordPress plugin prior to version 2.0.15 is vulnerable as it fails to authenticate the identity of board members submitting comments, enabling them to impersonate other users, including administrators. This flaw can lead to misinformation or unauthorized actions being attributed to legitimate users, potentially undermining trust in the platform. WordPress site administrators using this plugin should prioritize updating to the latest version to mitigate the risk of impersonation and maintain user integrity.

CVE
CVE-2026-89327
Severity
LOW
CVSS
3.8
EPSS
0.26%
WordPress

Original NVD Description

The FluentBoards WordPress plugin before 2.0.15 does not verify that a board member submitting a comment is the user the comment is attributed to, allowing any board member to post comments that appear to be authored by another user, including administrators.