Themetechmount Truebooker – Appointment Booking And Scheduler System vulnerabilities
- themetechmount truebooker – appointment booking and scheduler systemTrueBooker <= 1.2.3 - Missing Authorization to Unauthenticated Arbitrary User Email Modification via 'admin_addcustomer' AJAX Action9.8 Critical
- themetechmount truebooker – appointment booking and scheduler systemTrueBooker <= 1.2.6 - Unauthenticated Authorization Bypass Through User-Controlled Key to Account Takeover to 'truebooker_wp_user_id' Parameter9.8 Critical
- themetechmount truebooker – appointment booking and scheduler systemTrueBooker <= 1.2.6 - Unauthenticated Account Takeover via Insecure Direct Object Reference in 'truebooker_wp_user_id' Parameter9.8 Critical
- themetechmount truebooker – appointment booking and scheduler systemTrueBooker <= 1.2.3 - Missing Authorization to Unauthenticated Arbitrary Password Reset via 'tbab-userid'9.8 Critical
- themetechmount truebooker – appointment booking and scheduler systemTrueBooker <= 1.2.3 - Missing Authorization to Unauthenticated Arbitrary Password Reset via 'truebooker_wp_user_id'9.8 Critical
- themetechmount truebooker – appointment booking and scheduler systemTrueBooker <= 1.2.2 - Unauthenticated SQL Injection7.5 High
- themetechmount truebooker – appointment booking and scheduler systemTruebooker - Appointment Booking and Scheduler Plugin <= 1.1.4 - Sensitive Information Exposure via Views Files5.3 Medium