Skip to content
OpenAdvisories
High · 8.1 CVE-2026-40784 EUVD-2026-22907

WordPress FluentBoards plugin <= 1.91.2 - Insecure Direct Object References (IDOR) vulnerability

Published Apr 15, 2026 · Updated Apr 29, 2026 · Assigned by Patchstack

Vendor: Mahmudul Hasan Arif Product: FluentBoards

Description

Authorization Bypass Through User-Controlled Key vulnerability in Mahmudul Hasan Arif FluentBoards fluent-boards allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects FluentBoards: from n/a through <= 1.91.2.

Affected products

VendorProductAffectedFixed
Mahmudul Hasan Arif FluentBoards ≤ 1.91.2 —

References