Mmastodon TechnologyCybersecurity first seen 15 h ago, last 15 h ago, peak #12

FluentBooking Pro plugin hit by access control flaw

Original: 🚨 EUVD-2026-92950 📊 Score: 7.5/10 (CVSS v3.1) 📦 Product: FluentBooking Pro 🏢 Vendor: WP Manage Ninja 📅 Updated: 2026-10-

A high-severity vulnerability, EUVD-2026-92950, has been catalogued in FluentBooking Pro, the appointment scheduling plugin by WP Manage Ninja. The flaw is an unauthenticated broken access control issue with a CVSS v3.1 score of 7.5, meaning attackers need no credentials to exploit it. Site owners using the plugin are being urged to check for updates and patch promptly.

Why now: WordPress admins are being alerted to a newly published vulnerability in a widely used booking plugin that requires no authentication to exploit.

FluentBooking ProWP Manage NinjaENISA

Open on mastodon →

Evidence

• 🚨 EUVD-2026-92950 📊 Score: 7.5/10 (CVSS v3.1) 📦 Product: FluentBooking Pro 🏢 Vendor: WP Manage Ninja 📅 Updated: 2026-10-06 📝 Unauthenticated Broken Access Control in FluentBooking Pro 🔗 https:// euvd.enisa.europa.eu/vulnerabi lity/EUVD-2026-92950 # cybersecurity # infosec #… · EUVD_Bot

API: https://socialmediatrends-api.osmike.com/v1/trends/1207982