CVE-2026-84766: WordPress FluentBooking Pro plugin <= 2.2.1 - Bypass Vulnerability vulnerability
Unauthenticated Bypass Vulnerability in FluentBooking Pro <= 2.2.1 versions.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
WordPress FluentBooking Pro pluginto a version that resolves this vulnerability.Fixed in 2.3.0
Event History
Frequently Asked Questions
Who can exploit this issue?
The issue is described as unauthenticated, so an attacker does not need a WordPress account or existing plugin privileges. The network attack vector indicates it can be targeted remotely.
What versions are affected?
FluentBooking Pro versions up to and including 2.2.1 are identified as affected. The provided data does not identify a fixed version.
How difficult is exploitation?
The CVSS vector rates attack complexity as high. No user interaction is required, and successful exploitation can affect integrity but is not described as affecting confidentiality or availability.