Themetechmount Truebooker vulnerabilities

• themetechmount truebooker TrueBooker Appointment Booking 1.1.9 - 1.2.9 - Unauthenticated Service and Category Creation and Modification CVE-2026-94231 5.3 MediumOctober 19, 2026
• themetechmount truebooker TrueBooker Appointment Booking 1.1.9 - 1.2.9 - Unauthenticated Booking Creation with Arbitrary Price via Multiple AJAX Actions CVE-2026-94230 5.3 MediumOctober 19, 2026
• themetechmount truebooker TrueBooker Appointment Booking 1.1.9 - 1.2.9 - Unauthenticated Customer PII Disclosure via IDOR in 'refappbkd' Parameter CVE-2026-94229 5.3 MediumOctober 19, 2026
• themetechmount truebooker TrueBooker Appointment Booking 1.1.9 - 1.2.9 - Unauthenticated Plugin Settings Overwrite via admin_setting_setup_data CVE-2026-94228 5.3 MediumOctober 19, 2026
• themetechmount truebooker WordPress TrueBooker plugin <= 1.2.9 - Settings Change vulnerability CVE-2026-39798 6.5 MediumOctober 6, 2026
• themetechmount truebooker – appointment booking and scheduler system TrueBooker <= 1.2.3 - Missing Authorization to Unauthenticated Arbitrary User Email Modification via 'admin_addcustomer' AJAX Action CVE-2026-14349 9.8 CriticalSeptember 16, 2026
• themetechmount truebooker – appointment booking and scheduler system TrueBooker <= 1.2.6 - Unauthenticated Authorization Bypass Through User-Controlled Key to Account Takeover to 'truebooker_wp_user_id' Parameter CVE-2026-18315 Public exploit 9.8 CriticalAugust 19, 2026
• themetechmount truebooker WordPress TrueBooker plugin <= 1.2.6 - Privilege Escalation vulnerability CVE-2026-73347 9.8 CriticalAugust 19, 2026
• themetechmount truebooker TrueBooker Appointment Booking < 1.2.7 - Unauthenticated Appointment and Payment Record Deletion via update_appointment_booked CVE-2026-18779 5.3 MediumAugust 19, 2026
• themetechmount truebooker TrueBooker Appointment Booking < 1.2.7 - Unauthenticated Customer PII Disclosure via Multiple AJAX Actions CVE-2026-18778 5.3 MediumAugust 19, 2026
• themetechmount truebooker TrueBooker Appointment Booking < 1.2.7 - Unauthenticated Arbitrary Appointment Status Change via update_appointment_status CVE-2026-18777 5.3 MediumAugust 19, 2026
• themetechmount truebooker TrueBooker Appointment Booking < 1.2.7 - Unauthenticated Account Takeover via Multiple AJAX Actions CVE-2026-18776 9.8 CriticalAugust 19, 2026
• themetechmount truebooker – appointment booking and scheduler system TrueBooker <= 1.2.6 - Unauthenticated Account Takeover via Insecure Direct Object Reference in 'truebooker_wp_user_id' Parameter CVE-2026-16142 9.8 CriticalAugust 15, 2026
• themetechmount truebooker – appointment booking and scheduler system TrueBooker <= 1.2.3 - Missing Authorization to Unauthenticated Arbitrary Password Reset via 'tbab-userid' CVE-2026-14364 9.8 CriticalAugust 7, 2026
• themetechmount truebooker – appointment booking and scheduler system TrueBooker <= 1.2.3 - Missing Authorization to Unauthenticated Arbitrary Password Reset via 'truebooker_wp_user_id' CVE-2026-14365 9.8 CriticalAugust 7, 2026
• themetechmount truebooker – appointment booking and scheduler system TrueBooker <= 1.2.2 - Unauthenticated SQL Injection CVE-2026-13161 7.5 HighJuly 28, 2026
• themetechmount truebooker TrueBooker Appointment Booking < 1.2.4 - Unauthenticated Account Takeover via Password Reset CVE-2026-14545 9.8 CriticalJuly 28, 2026
• themetechmount truebooker WordPress TrueBooker plugin <= 1.2.3 - Privilege Escalation vulnerability CVE-2026-61951 9.8 CriticalJuly 23, 2026
• themetechmount truebooker WordPress TrueBooker plugin <= 1.2.3 - SQL Injection vulnerability CVE-2026-61950 9.3 CriticalJuly 23, 2026
• themetechmount truebooker WordPress TrueBooker plugin <= 1.1.9 - Broken Access Control vulnerability CVE-2026-48881 9.1 CriticalJune 15, 2026
• themetechmount truebooker WordPress TrueBooker plugin <= 1.1.5 - Broken Access Control vulnerability CVE-2026-39663 5.3 MediumApril 8, 2026
• themetechmount truebooker – appointment booking and scheduler system Truebooker - Appointment Booking and Scheduler Plugin <= 1.1.4 - Sensitive Information Exposure via Views Files CVE-2026-1797 5.3 MediumMarch 31, 2026
• themetechmount truebooker WordPress TrueBooker plugin <= 1.1.0 - Broken Access Control vulnerability CVE-2025-67581 5.3 MediumDecember 9, 2025
• themetechmount truebooker WordPress TrueBooker plugin <= 1.0.7 - Cross Site Request Forgery (CSRF) Vulnerability CVE-2025-47543 4.3 MediumMay 7, 2025
• themetechmount truebooker, truebooker-appointment-booking +1 more TrueBooker < 1.0.3 - Settings Update via CSRF CVE-2024-6925 4.3 MediumSeptember 8, 2024
• themetechmount truebooker, truebooker-appointment-booking +1 more TrueBooker < 1.0.3 - Multiple Unauthenticated SQLi CVE-2024-6924 9.8 CriticalSeptember 8, 2024