https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-07T01:22:35.668822+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cve-2026-14938 CVE-2026-14938 — FluentBoards < 1.95.3 - Subscriber+ Cross-Board Task Disclosure via IDOR 2026-10-07T01:22:35.686439+00:00

Affected: Unknown FluentBoards

The FluentBoards WordPress plugin before 1.95.3 does not verify that the items selected for a board import operation belong to a board the requesting user is authorized to access, allowing any authenticated user with member access to a single board to copy and read the stages and tasks (including titles, descriptions and file attachments) of any other board on the site.