Mahmudul Hasan Arif vulnerabilities

🔔 Create alert RSS

Published CVEs affecting Mahmudul Hasan Arif products: 5 record(s), with severity, exploitation and fixes.

FluentBoards 3 WP Social Ninja 2

Exploited only (KEV) →

CVE-2026-96821 Medium · 6.3 CWE-266 Sep 30, 2026

WordPress FluentBoards plugin <= 2.0.12 - Privilege Escalation vulnerability

Subscriber Privilege Escalation in FluentBoards <= 2.0.12 versions.

CVE-2026-65521 Medium · 5.3 CWE-497 Jul 23, 2026

WordPress WP Social Ninja plugin <= 4.3.0 - Sensitive Data Exposure vulnerability

Unauthenticated Sensitive Data Exposure in WP Social Ninja <= 4.3.0 versions.

CVE-2026-40784 High · 8.1 CWE-639 Apr 15, 2026

WordPress FluentBoards plugin <= 1.91.2 - Insecure Direct Object References (IDOR) vulnerability

Authorization Bypass Through User-Controlled Key vulnerability in Mahmudul Hasan Arif FluentBoards fluent-boards allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects FluentBoards: from n/a through <= 1.91.2.

CVE-2026-24561 Medium · 5.4 CWE-862 Jan 23, 2026

WordPress FluentBoards plugin <= 1.91.1 - Broken Access Control vulnerability

Missing Authorization vulnerability in Mahmudul Hasan Arif FluentBoards fluent-boards allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects FluentBoards: from n/a through <= 1.91.1.

CVE-2025-64375 Medium · 6.5 CWE-862 Dec 18, 2025

WordPress WP Social Ninja plugin <= 3.20.1 - Broken Access Control vulnerability

Missing Authorization vulnerability in Mahmudul Hasan Arif WP Social Ninja wp-social-reviews allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WP Social Ninja: from n/a through <= 3.20.1.