Themetechmount Truebooker – Appointment Booking And Scheduler System
6 CVEs affecting Themetechmount Truebooker – Appointment Booking And Scheduler System. Latest disclosed: 2026-08-19. Critical: 4, High: 1.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2026-18315 | Critical | 9.8 | 2026-08-19 | The TrueBooker – Appointment Booking and Scheduler System plugin for WordPress is vulnerable to Authorization Bypass Through User-Controlled Key leading to Acc… |
CVE-2026-16142 | Critical | 9.8 | 2026-08-15 | The TrueBooker plugin for WordPress is vulnerable to Account Takeover in all versions up to, and including, 1.2.6. This is due to the add_front_user_update() A… |
CVE-2026-14365 | Critical | 9.8 | 2026-08-07 | The TrueBooker – Appointment Booking and Scheduler System plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 1.2… |
CVE-2026-14364 | Critical | 9.8 | 2026-08-07 | The TrueBooker – Appointment Booking and Scheduler System plugin for WordPress is vulnerable to account takeover via improper password reset validation in all… |
CVE-2026-13161 | High | 7.5 | 2026-07-28 | The TrueBooker – Appointment Booking and Scheduler System plugin for WordPress is vulnerable to generic SQL Injection via the 'alldata[truebooker_user]' parame… |
CVE-2026-1797 | Medium | 5.3 | 2026-03-31 | The Appointment Booking and Scheduler Plugin – Truebooker plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and inclu… |