Unknown Truebooker vulnerabilities

• themetechmount truebooker TrueBooker Appointment Booking 1.1.9 - 1.2.9 - Unauthenticated Service and Category Creation and Modification CVE-2026-94231 5.3 MediumOctober 19, 2026
• themetechmount truebooker TrueBooker Appointment Booking 1.1.9 - 1.2.9 - Unauthenticated Booking Creation with Arbitrary Price via Multiple AJAX Actions CVE-2026-94230 5.3 MediumOctober 19, 2026
• themetechmount truebooker TrueBooker Appointment Booking 1.1.9 - 1.2.9 - Unauthenticated Customer PII Disclosure via IDOR in 'refappbkd' Parameter CVE-2026-94229 5.3 MediumOctober 19, 2026
• themetechmount truebooker TrueBooker Appointment Booking 1.1.9 - 1.2.9 - Unauthenticated Plugin Settings Overwrite via admin_setting_setup_data CVE-2026-94228 5.3 MediumOctober 19, 2026
• themetechmount truebooker TrueBooker Appointment Booking < 1.2.7 - Unauthenticated Appointment and Payment Record Deletion via update_appointment_booked CVE-2026-18779 5.3 MediumAugust 19, 2026
• themetechmount truebooker TrueBooker Appointment Booking < 1.2.7 - Unauthenticated Customer PII Disclosure via Multiple AJAX Actions CVE-2026-18778 5.3 MediumAugust 19, 2026
• themetechmount truebooker TrueBooker Appointment Booking < 1.2.7 - Unauthenticated Arbitrary Appointment Status Change via update_appointment_status CVE-2026-18777 5.3 MediumAugust 19, 2026
• themetechmount truebooker TrueBooker Appointment Booking < 1.2.7 - Unauthenticated Account Takeover via Multiple AJAX Actions CVE-2026-18776 9.8 CriticalAugust 19, 2026
• themetechmount truebooker TrueBooker Appointment Booking < 1.2.4 - Unauthenticated Account Takeover via Password Reset CVE-2026-14545 9.8 CriticalJuly 28, 2026
• themetechmount truebooker, truebooker-appointment-booking +1 more TrueBooker < 1.0.3 - Settings Update via CSRF CVE-2024-6925 4.3 MediumSeptember 8, 2024
• themetechmount truebooker, truebooker-appointment-booking +1 more TrueBooker < 1.0.3 - Multiple Unauthenticated SQLi CVE-2024-6924 9.8 CriticalSeptember 8, 2024