Fluent Booking Pro Vulnerabilities

The Fluent Booking Pro plugin for WordPress is vulnerable to unauthorized access in all versions up to 2.5.0. This is due to a missing capability check on a function. This makes it possible for unauthenticated attackers to perform an unauthorized action.

CVSS:

5.3

(Wordfence)

Affected:

up to 2.5.0

Fixed in:

2.5.0

Disclosed:

Oct 5, 2026

CVE-2026-105072 on NVD →

The Fluent Booking Pro plugin for WordPress is vulnerable to unauthorized access due to a missing capability check on a function in all versions up to, and including, 2.2.1. This makes it possible for unauthenticated attackers to perform an unauthorized action.

CVSS:

5.3

(Wordfence)

Affected:

up to 2.2.1

Fixed in:

2.3.0

Disclosed:

Sep 3, 2026

CVE-2026-84766 on NVD →

The FluentBooking Pro plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 2.2.4. This is due to missing or incorrect nonce validation on a function. This makes it possible for unauthenticated attackers to perform an unauthorized action via a forged request granted they...

CVSS:

4.3

(Wordfence)

Affected:

up to 2.2.4

Fixed in:

2.2.5

Disclosed:

Aug 26, 2026

CVE-2026-81273 on NVD →