CVE-2026-84766

MediumCVSS 5.9

Published: 03/09/2026(UTC)Updated: 05/09/2026(UTC)Translated: 03/09/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.20%

10th percentile - higher than 10% of all known CVEs

Summary

The FluentBooking Pro plugin version 2.2.1 and earlier contains an unauthenticated bypass vulnerability.

Risk Assessment

An unauthenticated attacker can exploit this vulnerability to bypass security mechanisms, potentially leading to unauthorized access to functionality or data.

Recommendation

Update the FluentBooking Pro plugin to the latest version that includes a fix for the vulnerability.

Other vulnerabilities in FluentBooking Pro

See all

CVE-2026-105072High
The FluentBooking Pro plugin in versions below 2.5.0 is vulnerable to unauthenticated broken access control. Technical details are not provided in the description.
CVE-2026-81273High
Unauthenticated Cross Site Request Forgery (CSRF) in FluentBooking Pro <= 2.2.4 versions.

Original NVD description (English source)

Unauthenticated Bypass Vulnerability in FluentBooking Pro <= 2.2.1 versions.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS