CVE-2026-84766
Deferred Deferred - Pending Action

Unauthenticated Access Bypass in FluentBooking Pro

Publication date: 2026-09-03

Last updated on: 2026-09-03

Assigner: Patchstack

Description
Unauthenticated Bypass Vulnerability in FluentBooking Pro <= 2.2.1 versions.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-09-03
Last Modified
2026-09-03
Generated
2026-09-03
AI Q&A
2026-09-03
EPSS Evaluated
N/A
NVD
CVE-2026-84766
EUVD
EUVD-2026-70561

Affected Vendors & Products

Showing 3 associated CPEs
Vendor Product Version / Range
fluentbooking pro to 2.2.1 (inc)
fluentbooking fluent_booking_pro to 2.2.1 (exc)
fluentbooking fluent_booking_pro From 2.3.0 (inc)

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-290 This attack-focused weakness is caused by incorrectly implemented authentication schemes that are subject to spoofing attacks.

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

This is an unauthenticated bypass vulnerability in FluentBooking Pro plugin versions 2.2.1 and earlier. It allows attackers to bypass certain code restrictions without needing any privileges.

Detection Guidance

To detect this vulnerability, check the installed version of the FluentBooking Pro plugin in your WordPress admin panel under Plugins. If the version is 2.2.1 or earlier, the system is vulnerable. No specific commands are provided in the context, but manual verification of the plugin version is recommended.

Impact Analysis

The impact is limited due to a low CVSS score of 5.9. It may allow unauthorized access or actions in the plugin but is unlikely to be exploited easily. Users should update to version 2.3.0 or later to mitigate risks.

Compliance Impact

The vulnerability allows bypassing code restrictions without authentication, which could potentially lead to unauthorized access to sensitive data. This may impact compliance with GDPR or HIPAA if personal or health data is exposed. However, the low CVSS score and limited exploitability suggest minimal risk.

Mitigation Strategies

Immediately update the FluentBooking Pro plugin to version 2.3.0 or later. If updating is not possible, seek assistance from your hosting provider or developer. Enable auto-updates for the plugin if available through Patchstack.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-84766. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart