Themetechmount Truebooker
8 CVEs affecting Themetechmount Truebooker. Latest disclosed: 2026-07-23. Critical: 4, High: 0.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2026-61951 | Critical | 9.8 | 2026-07-23 | Unauthenticated Privilege Escalation in TrueBooker <= 1.2.3 versions. |
CVE-2024-6924 | Critical | 9.8 | 2024-09-08 | The TrueBooker WordPress plugin before 1.0.3 does not properly sanitise and escape a parameter before using it in a SQL statement via an AJAX action available… |
CVE-2026-61950 | Critical | 9.3 | 2026-07-23 | Unauthenticated SQL Injection in TrueBooker <= 1.2.3 versions. |
CVE-2026-48881 | Critical | 9.1 | 2026-06-15 | Unauthenticated Broken Access Control in TrueBooker <= 1.1.9 versions. |
CVE-2026-39663 | Medium | 5.3 | 2026-04-08 | Missing Authorization vulnerability in themetechmount TrueBooker truebooker-appointment-booking allows Exploiting Incorrectly Configured Access Control Securit… |
CVE-2025-67581 | Medium | 5.3 | 2025-12-09 | Missing Authorization vulnerability in themetechmount TrueBooker truebooker-appointment-booking allows Exploiting Incorrectly Configured Access Control Securit… |
CVE-2025-47543 | Medium | 4.3 | 2025-05-07 | Cross-Site Request Forgery (CSRF) vulnerability in themetechmount TrueBooker truebooker-appointment-booking allows Cross Site Request Forgery.This issue affect… |
CVE-2024-6925 | Medium | 4.3 | 2024-09-08 | The TrueBooker WordPress plugin before 1.0.3 does not have CSRF check in place when updating its settings, which could allow attackers to make a logged in adm… |