CVE-2026-105072: WordPress FluentBooking Pro plugin < 2.5.0 - Broken Access Control vulnerability
Unauthenticated Broken Access Control in FluentBooking Pro < 2.5.0 versions.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
WordPress FluentBooking Pro pluginto a version that resolves this vulnerability.Fixed in 2.5.0
Event History
Frequently Asked Questions
Who can exploit this issue?
The vulnerability is unauthenticated, so an attacker does not need a WordPress account or prior access to the site. It is remotely reachable over the network and has low attack complexity.
What is the likely impact of successful exploitation?
The provided severity vector indicates an integrity impact, meaning an attacker may be able to make unauthorized changes. No confidentiality or availability impact is indicated by the supplied data.
Which installations are affected?
FluentBooking Pro versions earlier than 2.5.0 are affected. The provided data does not state whether any particular WordPress configuration or feature enablement is required.