CVE-2026-105072

HighCVSS 7.5

Published: 06/10/2026(UTC)Updated: 06/10/2026(UTC)Translated: 06/10/2026(UTC)NVD NIST

Summary

The FluentBooking Pro plugin in versions below 2.5.0 is vulnerable to unauthenticated broken access control. Technical details are not provided in the description.

Risk Assessment

An unauthenticated attacker may access functions or data they are not authorized for, potentially leading to modification or leakage of information. The risk is high due to no login requirement.

Recommendation

Update the FluentBooking Pro plugin to version 2.5.0 or later. Until then, consider disabling the plugin or restricting access to its endpoints.

Other vulnerabilities in FluentBooking Pro

See all

CVE-2026-84766Medium
The FluentBooking Pro plugin version 2.2.1 and earlier contains an unauthenticated bypass vulnerability.
CVE-2026-81273High
Unauthenticated Cross Site Request Forgery (CSRF) in FluentBooking Pro <= 2.2.4 versions.

Original NVD description (English source)

Unauthenticated Broken Access Control in FluentBooking Pro < 2.5.0 versions.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS