ThemetechMount vulnerabilities

CVEs per yearBy the year they were published

1. 20252
2. 202614

Newest CVEs

• CVE-2026-39798

  WordPress TrueBooker plugin <= 1.2.9 - Settings Change vulnerability

  ThemetechMount · TrueBooker

  Medium6.5
• CVE-2026-14349

  TrueBooker <= 1.2.3 - Missing Authorization to Unauthenticated Arbitrary User Email Modification via 'admin_addcustomer' AJAX Action

  themetechmount · TrueBooker – Appointment Booking and Scheduler System

  Critical9.8
• CVE-2026-18315

  TrueBooker <= 1.2.6 - Unauthenticated Authorization Bypass Through User-Controlled Key to Account Takeover to 'truebooker_wp_user_id' Parameter

  themetechmount · TrueBooker – Appointment Booking and Scheduler System

  Critical9.8
• CVE-2026-73347

  WordPress TrueBooker plugin <= 1.2.6 - Privilege Escalation vulnerability

  ThemetechMount · TrueBooker

  Critical9.8
• CVE-2026-16142

  TrueBooker <= 1.2.6 - Unauthenticated Account Takeover via Insecure Direct Object Reference in 'truebooker_wp_user_id' Parameter

  themetechmount · TrueBooker – Appointment Booking and Scheduler System

  Critical9.8
• CVE-2026-14364

  TrueBooker <= 1.2.3 - Missing Authorization to Unauthenticated Arbitrary Password Reset via 'tbab-userid'

  themetechmount · TrueBooker – Appointment Booking and Scheduler System

  Critical9.8
• CVE-2026-14365

  TrueBooker <= 1.2.3 - Missing Authorization to Unauthenticated Arbitrary Password Reset via 'truebooker_wp_user_id'

  themetechmount · TrueBooker – Appointment Booking and Scheduler System

  Critical9.8
• CVE-2026-13161

  TrueBooker <= 1.2.2 - Unauthenticated SQL Injection

  themetechmount · TrueBooker – Appointment Booking and Scheduler System

  High7.5
• CVE-2026-61951

  WordPress TrueBooker plugin <= 1.2.3 - Privilege Escalation vulnerability

  themetechmount · TrueBooker

  Critical9.8
• CVE-2026-61950

  WordPress TrueBooker plugin <= 1.2.3 - SQL Injection vulnerability

  themetechmount · TrueBooker

  Critical9.3