CVE-2026-96821: WordPress FluentBoards plugin <= 2.0.12 - Privilege Escalation vulnerability

Q: What level of access does an attacker need to exploit this issue?

An attacker needs an existing low-privileged account with Subscriber-level access or equivalent privileges. No user interaction is required.

Q: What impact could successful exploitation have?

Successful exploitation can result in privilege escalation. The supplied CVSS vector indicates low impacts to confidentiality, integrity, and availability.

Q: Which FluentBoards versions are affected?

FluentBoards versions up to and including 2.0.12 are affected.

Published Sep 30, 2026

Updated

Subscriber Privilege Escalation in FluentBoards <= 2.0.12 versions.

Affected Software

1 affected component

FluentBoards FluentBoards<=2.0.12

Remediation

Recommended actions to resolve this vulnerability, in priority order.

Upgrade
Upgrade wordpress/fluentboards to a version that resolves this vulnerability.
Fixed in 2.0.15

Event History

Sep 30, 2026

CVE Published

via MITRE·12:27 PM

Data Sourced

via MITRE·12:27 PM

RemedyDescriptionSeverityWeakness

Data Sourced

via NVD·01:17 PM

DescriptionSeverityWeakness

Frequently Asked Questions

What level of access does an attacker need to exploit this issue?

An attacker needs an existing low-privileged account with Subscriber-level access or equivalent privileges. No user interaction is required.

What impact could successful exploitation have?