All products

truebooker-appointment-booking

WordPress · Plugin
25 reports
Vulnerability alerts
Follow
ReportProductEcosystemSeverityFix statusLast updated
TrueBooker – Appointment Booking and Scheduler System <= 1.2.9 - Missing Authorization to Unauthenticated Settings UpdateCVE-2026-39798 truebooker-appointment-booking WordPress Medium Fix reported
TrueBooker Appointment Booking 1.1.9 - 1.2.9 - Missing AuthorizationCVE-2026-94231 truebooker-appointment-booking WordPress Medium Fix reported
TrueBooker Appointment Booking 1.1.9 - 1.2.9 - Missing AuthorizationCVE-2026-94230 truebooker-appointment-booking WordPress Medium Fix reported
TrueBooker Appointment Booking 1.1.9 - 1.2.9 - Unauthenticated Information ExposureCVE-2026-94229 truebooker-appointment-booking WordPress Medium Fix reported
TrueBooker Appointment Booking 1.1.9 - 1.2.9 - Missing AuthorizationCVE-2026-94228 truebooker-appointment-booking WordPress Medium Fix reported
TrueBooker <= 1.2.3 - Missing Authorization to Unauthenticated Arbitrary User Email Modification via 'admin_addcustomer' AJAX ActionCVE-2026-14349 truebooker-appointment-booking WordPress Critical Fix reported
TrueBooker – Appointment Booking and Scheduler System <= 1.2.6 - Unauthenticated Privilege EscalationCVE-2026-73347 truebooker-appointment-booking WordPress High Fix reported
TrueBooker – Appointment Booking and Scheduler System < 1.2.7 - Missing AuthorizationCVE-2026-18777 truebooker-appointment-booking WordPress Medium Fix reported
TrueBooker – Appointment Booking and Scheduler System < 1.2.7 - Unauthenticated Privilege EscalationCVE-2026-18776 truebooker-appointment-booking WordPress High Fix reported
TrueBooker – Appointment Booking and Scheduler System < 1.2.7 - Unauthenticated Information ExposureCVE-2026-18778 truebooker-appointment-booking WordPress Medium Fix reported
TrueBooker – Appointment Booking and Scheduler System < 1.2.7 - Missing AuthorizationCVE-2026-18779 truebooker-appointment-booking WordPress Medium Fix reported
TrueBooker <= 1.2.6 - Unauthenticated Authorization Bypass Through User-Controlled Key to Account Takeover to 'truebooker_wp_user_id' ParameterCVE-2026-18315 truebooker-appointment-booking WordPress Critical Fix reported
TrueBooker <= 1.2.6 - Unauthenticated Account Takeover via Insecure Direct Object Reference in 'truebooker_wp_user_id' ParameterCVE-2026-16142 truebooker-appointment-booking WordPress Critical Fix reported
TrueBooker <= 1.2.3 - Missing Authorization to Unauthenticated Arbitrary Password Reset via 'tbab-userid'CVE-2026-14364 truebooker-appointment-booking WordPress Critical Fix reported
TrueBooker <= 1.2.3 - Missing Authorization to Unauthenticated Arbitrary Password Reset via 'truebooker_wp_user_id'CVE-2026-14365 truebooker-appointment-booking WordPress Critical Fix reported
TrueBooker – Appointment Booking and Scheduler System <= 1.2.3 - Unauthenticated Privilege EscalationCVE-2026-61951 truebooker-appointment-booking WordPress Critical Fix reported
TrueBooker <= 1.2.2 - Unauthenticated SQL InjectionCVE-2026-13161 truebooker-appointment-booking WordPress High Fix reported
TrueBooker – Appointment Booking and Scheduler System <= 1.2.3 - Unauthenticated SQL InjectionCVE-2026-61950 truebooker-appointment-booking WordPress High Fix reported
TrueBooker – Appointment Booking and Scheduler System <= 1.1.9 - Missing AuthorizationCVE-2026-48881 truebooker-appointment-booking WordPress Medium Fix reported
TrueBooker <= 1.1.6 - Missing AuthorizationCVE-2026-39663 truebooker-appointment-booking WordPress Medium Fix reported