WordPress plugin
FluentBoards – Project Management, Task Management, Goal Tracking, Kanban Board, and, Team Collaboration security & vulnerabilities
No known unpatched vulnerabilities in the latest version
All 11 known vulnerabilities are fixed in the latest release. If you run an older version, update to null or newer.
- Critical1
- High0
- Medium10
- Low0
All FluentBoards – Project Management, Task Management, Goal Tracking, Kanban Board, and, Team Collaboration vulnerabilities
| Severity | Vulnerability | CVE | Published |
|---|---|---|---|
| Medium4.3 | Missing Authorization ≤2.2.2Update to 2.3.0 | CVE-2026-119486 | |
| Medium4.3 | Missing Authorization ≤2.1.0Update to 2.2.0 | CVE-2026-109696 | |
| Medium6.3 | Authenticated (Subscriber+) Privilege Escalation ≤2.0.12Update to 2.0.15 | CVE-2026-96821 | |
| Medium5.3 | 2.0.15 - Unauthenticated Information Exposure 1.95 – 2.0.15Update to 2.1.0 | CVE-2026-89331 | |
| Medium4.3 | Authenticated (Subscriber+) Information Exposure ≤2.0.14Update to 2.0.15 | CVE-2026-85349 | |
| Medium4.3 | Missing Authorization ≤2.0.14Update to 2.0.15 | CVE-2026-89328 | |
| Medium4.3 | Authenticated (Board Member+) Comment Author Spoofing ≤2.0.14Update to 2.0.15 | CVE-2026-89327 | |
| Medium4.3 | Authenticated (Subscriber+) Insecure Direct Object Reference <1.95.3Update to 1.95.3 | CVE-2026-14938 | |
| Medium4.3 | Authenticated (Board Member+) Insecure Direct Object Reference ≤1.91.2Update to 1.91.3 | CVE-2026-40784 | |
| Medium4.3 | Missing Authorization ≤1.91.1Update to 1.91.2 | CVE-2026-24561 | |
| Critical9.8 | Unauthenticated PHP Object Injection ≤1.47Update to 1.48 | CVE-2025-39551 |
- Medium4.3Missing Authorization
≤2.2.2Update to 2.3.0
- Medium4.3Missing Authorization
≤2.1.0Update to 2.2.0
- Medium6.3Authenticated (Subscriber+) Privilege Escalation
≤2.0.12Update to 2.0.15
- Medium5.32.0.15 - Unauthenticated Information Exposure
1.95 – 2.0.15Update to 2.1.0
- Medium4.3Authenticated (Subscriber+) Information Exposure
≤2.0.14Update to 2.0.15
- Medium4.3Missing Authorization
≤2.0.14Update to 2.0.15
- Medium4.3Authenticated (Board Member+) Comment Author Spoofing
≤2.0.14Update to 2.0.15
- Medium4.3Authenticated (Subscriber+) Insecure Direct Object Reference
<1.95.3Update to 1.95.3
- Medium4.3Authenticated (Board Member+) Insecure Direct Object Reference
≤1.91.2Update to 1.91.3
- Medium4.3Missing Authorization
≤1.91.1Update to 1.91.2
- Critical9.8Unauthenticated PHP Object Injection
≤1.47Update to 1.48
FluentBoards – Project Management, Task Management, Goal Tracking, Kanban Board, and, Team Collaboration: common questions
Does FluentBoards – Project Management, Task Management, Goal Tracking, Kanban Board, and, Team Collaboration have known vulnerabilities?
Yes. VulnCrest Radar lists 11 known vulnerabilities in FluentBoards – Project Management, Task Management, Goal Tracking, Kanban Board, and, Team Collaboration: 1 critical, 10 medium. None are known to affect version null.
How do I check which version of FluentBoards – Project Management, Task Management, Goal Tracking, Kanban Board, and, Team Collaboration I run?
In wp-admin open Plugins → Installed Plugins; the version is shown under the name. Without admin access, our passive Check my site tool can often read it from public files.
What is the most recent FluentBoards – Project Management, Task Management, Goal Tracking, Kanban Board, and, Team Collaboration vulnerability?
CVE-2026-119486, published Nov 7, 2026: FluentBoards – Project Management, Task Management, Goal Tracking, Kanban Board, and, Team Collaboration <= 2.2.2 - Missing Authorization. Severity: Medium (CVSS 4.3).
Is any FluentBoards – Project Management, Task Management, Goal Tracking, Kanban Board, and, Team Collaboration vulnerability listed in CISA KEV?
No. None of the known FluentBoards – Project Management, Task Management, Goal Tracking, Kanban Board, and, Team Collaboration vulnerabilities is currently listed in the CISA KEV catalog.