Unknown TrueBooker vulnerabilities

CVEs per yearBy the year they were published

1. 20242
2. 20269

Newest CVEs

• CVE-2026-94231

  TrueBooker Appointment Booking 1.1.9 - 1.2.9 - Unauthenticated Service and Category Creation and Modification

  Unknown · TrueBooker

  Medium5.3
• CVE-2026-94230

  TrueBooker Appointment Booking 1.1.9 - 1.2.9 - Unauthenticated Booking Creation with Arbitrary Price via Multiple AJAX Actions

  Unknown · TrueBooker

  Medium5.3
• CVE-2026-94229

  TrueBooker Appointment Booking 1.1.9 - 1.2.9 - Unauthenticated Customer PII Disclosure via IDOR in 'refappbkd' Parameter

  Unknown · TrueBooker

  Medium5.3
• CVE-2026-94228

  TrueBooker Appointment Booking 1.1.9 - 1.2.9 - Unauthenticated Plugin Settings Overwrite via admin_setting_setup_data

  Unknown · TrueBooker

  Medium5.3
• CVE-2026-18779

  TrueBooker Appointment Booking < 1.2.7 - Unauthenticated Appointment and Payment Record Deletion via update_appointment_booked

  Unknown · TrueBooker

  Medium5.3
• CVE-2026-18778

  TrueBooker Appointment Booking < 1.2.7 - Unauthenticated Customer PII Disclosure via Multiple AJAX Actions

  Unknown · TrueBooker

  Medium5.3
• CVE-2026-18777

  TrueBooker Appointment Booking < 1.2.7 - Unauthenticated Arbitrary Appointment Status Change via update_appointment_status

  Unknown · TrueBooker

  Medium5.3
• CVE-2026-18776

  TrueBooker Appointment Booking < 1.2.7 - Unauthenticated Account Takeover via Multiple AJAX Actions

  Unknown · TrueBooker

  Critical9.8
• CVE-2026-14545

  TrueBooker Appointment Booking < 1.2.4 - Unauthenticated Account Takeover via Password Reset

  Unknown · TrueBooker

  Critical9.8
• CVE-2024-6925

  TrueBooker < 1.0.3 - Settings Update via CSRF

  Unknown · TrueBooker

  Medium4.3