CVE-2026-81273
HighCVSS 8.1Exploitation Probability (EPSS)
Low risk7th percentile - higher than 7% of all known CVEs
Summary
Unauthenticated Cross Site Request Forgery (CSRF) in FluentBooking Pro <= 2.2.4 versions.
Risk Assessment
Risk of unauthorized actions performed on behalf of an administrator, which may lead to settings changes, data deletion, or other harmful operations.
Recommendation
Update FluentBooking Pro to the latest version and implement CSRF protection mechanisms such as tokens.
Other vulnerabilities in FluentBooking Pro
See all- CVE-2026-105072High
The FluentBooking Pro plugin in versions below 2.5.0 is vulnerable to unauthenticated broken access control. Technical details are not provided in the description.
- CVE-2026-84766Medium
The FluentBooking Pro plugin version 2.2.1 and earlier contains an unauthenticated bypass vulnerability.
Original NVD description (English source)
Unauthenticated Cross Site Request Forgery (CSRF) in FluentBooking Pro <= 2.2.4 versions.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS