CVE-2026-84766

MediumCVSS 5.9/10Last modified Sep 5, 2026

Description

Unauthenticated Bypass Vulnerability in FluentBooking Pro <= 2.2.1 versions.

Metrics

CVSS 3.1 5.9/10CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N

Weakness enumeration

CWE-290

Affected software

VendorProductVersions
WP Manage NinjaFluentBooking Pro<= 2.2.1

References

Timeline

Published
Sep 3, 2026
Last modified
Sep 5, 2026
NVD status
Deferred

Related CVEs from 2026

CVE-2026-847675.3Unauthenticated Bypass Vulnerability in BookIt <= 2.6.0.3 versions.CVE-2026-847689.3Unauthenticated SQL Injection in VikAppointments Services Booking Calendar <= 1.2.20 versions.CVE-2026-847696.5Unauthenticated Insecure Direct Object References (IDOR) in Business Directory <= 6.4.26 versions.CVE-2026-84772.7Improper enforcement of the sealed-entry workflow in the entry sensitive-data retrieval feature in Devolutions Server allows an authenticateCVE-2026-847708.8Unauthenticated Cross Site Request Forgery (CSRF) in Mang Board WP <= 2.3.8 versions.CVE-2026-847715.3Unauthenticated Insecure Direct Object References (IDOR) in PublishPress Permissions <= 4.8.3 versions.CVE-2026-847725.5Editor Server Side Request Forgery (SSRF) in Broken Link Checker <= 2.4.14 versions.CVE-2026-847737.2Unauthenticated Cross Site Scripting (XSS) in EWWW Image Optimizer <= 8.7.6 versions.CVE-2026-847746.1Unauthenticated Cross Site Scripting (XSS) in WP Statistics <= 14.16.11 versions.CVE-2026-847755.3Unauthenticated Denial of Service Attack in Really Simple SSL <= 9.8.0 versions.CVE-2026-847767.5Unauthenticated Denial of Service Attack in MalCare Security <= 6.69 versions.CVE-2026-847777.4Unauthenticated Broken Authentication in Really Simple SSL <= 9.8.0 versions.
CVE-2026-84766: Medium severity, CVSS 5.9 | Vulnix