THREATOPS
THREAT OPS › Threat News › [NVD] CVE-2026-14938 — The FluentBoards WordPress plugin before 1.95.3 does not verify that the items selected for a board import operation belong to a board the requesting user is authorized to access, allowing any authenticated user with member access to a single board to copy and read the stages an

[NVD] CVE-2026-14938 — The FluentBoards WordPress plugin before 1.95.3 does not verify that the items selected for a board import operation belong to a board the requesting user is authorized to access, allowing any authenticated user with member access to a single board to copy and read the stages an

mednvdPublished 2026-08-02

CVE-2026-14938 CVSS: None Published: 2026-08-02T06:16:35.947

The FluentBoards WordPress plugin before 1.95.3 does not verify that the items selected for a board import operation belong to a board the requesting user is authorized to access, allowing any authenticated user with member access to a single board to copy and read the stages and tasks (including titles, descriptions and file attachme

Indicators of compromise

Original source: https://nvd.nist.gov/vuln/detail/CVE-2026-14938