CVE-2026-9576

The vulnerability CVE-2026-9576 affects the Fluent Booking WordPress plugin prior to version 2.1.2 . The issue is that the plugin does not verify ownership of the requested group_id before exporting attendee data via the export endpoint, enabling users with at least the Calendar Manager role to r...