CVE-2026-40784 - Vulnerability Analysis

Overview

Mahmudul Hasan Arif FluentBoards <= 1.91.2 contains an authorization bypass caused by incorrectly configured access control security levels, letting attackers bypass authorization, exploit requires crafted user-controlled key.

Severity & Score

Impact

Attackers can bypass authorization controls, gaining unauthorized access to restricted resources or actions.

Mitigation

Update to the latest version beyond 1.91.2.

References

• https://patchstack.com/database/Wordpress/Plugin/fluent-boards/vulnerability/wordpress-fluentboards-plugin-1-91-2-insecure-direct-object-references-idor-vulnerability?_s_id=cve

Related Resources

• Vulnerability Intelligence Dashboard
• Credential Scanner