Fluent Boards Pro

Fluent Boards Pro has 5 disclosed vulnerabilities in the WordSec catalog, all reported in 2026; all 5 are fixed as of October 2026. Their average CVSS score is 6.2, and the most serious one scores 7.2 out of 10. Severity breakdown: 0 critical and 1 high. 2026 was the busiest year with 5 disclosures.

The most common weakness is Authorization Bypass Through User-Controlled Key, behind 1 of the records (20%). Other recurring categories include Cross-Site Scripting, Deserialization Of Untrusted Data.

Every one of the 5 issues recorded for Fluent Boards Pro has a vendor fix available, so running the current release closes all known holes.

All of these findings were reported by Ananda Dhakal.

Strategic Overview

Avg CVSSMedium

6.2/ 10

Patch Coverage100%

Open

Fixed

Get automatic notifications for all Fluent Boards Pro vulnerabilities before they are exploited.

Highest severity on recordCVSS 7.2CVE-2026-78274

Fluent Boards Pro <= 2.0.11 - Authenticated (Editor+) Arbitrary File Upload

Read the full analysis

Vulnerability Records

5 records


2026-08-26 00:00	Fluent Boards Pro <= 2.0.11 - Authenticated (Editor+) Arbitrary File Upload Fluent Boards Pro <= 2.0.11	`CVE-2026-78274`	7.2 High	Ananda Dhakal	Yes
2026-08-26 00:00	Fluent Boards Pro <= 2.0.11 - Authenticated (Editor+) Arbitrary File Deletion Fluent Boards Pro <= 2.0.11	`CVE-2026-78275`	6.5 Medium	Ananda Dhakal	Yes
2026-08-26 00:00	Fluent Boards Pro <= 2.0.11 - Authenticated (Subscriber+) Stored Cross-Site Scripting Fluent Boards Pro <= 2.0.11	`CVE-2026-78273`	6.4 Medium	Ananda Dhakal	Yes
2026-08-26 00:00	Fluent Boards Pro <= 2.0.11 - Authenticated (Editor+) PHP Object Injection Fluent Boards Pro <= 2.0.11	`CVE-2026-78276`	6.6 Medium	Ananda Dhakal	Yes
2026-08-24 00:00	Fluent Boards Pro <= 2.0.11 - Authenticated (Subscriber+) Insecure Direct Object Reference Fluent Boards Pro <= 2.0.11	`CVE-2026-78278`	4.3 Medium	Ananda Dhakal	Yes

Showing 1–5 of 5 reports