CVE-2026-18776: CWE-269 Improper Privilege Management in TrueBooker
The TrueBooker WordPress plugin before 1.2.7 does not have proper authorisation checks in some of its AJAX actions, allowing unauthenticated users to change the email address of arbitrary users, including administrators, and subsequently take over their account via the password reset flow.
AI Analysis
Technical Summary
The TrueBooker WordPress plugin versions prior to 1.2.7 contain an improper privilege management vulnerability (CWE-269) due to missing authorization checks in certain AJAX endpoints. This allows unauthenticated attackers to modify the email address associated with any user account, including administrator accounts. By changing the email address, attackers can trigger the password reset flow to gain control over the targeted accounts.
Potential Impact
An attacker can fully compromise user accounts, including those with administrative privileges, by exploiting the lack of authorization checks to change email addresses and subsequently reset passwords. This leads to complete account takeover and potential full site compromise.
Mitigation Recommendations
Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, restrict access to AJAX endpoints and monitor for suspicious activity related to user account modifications.
CVE-2026-18776: CWE-269 Improper Privilege Management in TrueBooker
Description
The TrueBooker WordPress plugin before 1.2.7 does not have proper authorisation checks in some of its AJAX actions, allowing unauthenticated users to change the email address of arbitrary users, including administrators, and subsequently take over their account via the password reset flow.
Weaknesses
AI-Powered Analysis
Machine-generated threat intelligence
Technical Analysis
The TrueBooker WordPress plugin versions prior to 1.2.7 contain an improper privilege management vulnerability (CWE-269) due to missing authorization checks in certain AJAX endpoints. This allows unauthenticated attackers to modify the email address associated with any user account, including administrator accounts. By changing the email address, attackers can trigger the password reset flow to gain control over the targeted accounts.
Potential Impact
An attacker can fully compromise user accounts, including those with administrative privileges, by exploiting the lack of authorization checks to change email addresses and subsequently reset passwords. This leads to complete account takeover and potential full site compromise.
Mitigation Recommendations
Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, restrict access to AJAX endpoints and monitor for suspicious activity related to user account modifications.
Technical Details
- Data Version
- 5.2
- Assigner Short Name
- WPScan
- Date Reserved
- 2026-08-04T07:43:29.649Z
- Cvss Version
- null
- State
- PUBLISHED
- Remediation Level
- null
Threat ID: 6a854e93c6e8be033248b293
Added to database: 08/19/2026, 06:34:59 UTC
Last enriched: 08/19/2026, 06:54:40 UTC
Last updated: 08/19/2026, 11:17:36 UTC
Views: 6
Community Reviews
0 reviewsCrowdsource mitigation strategies, share intel context, and vote on the most helpful responses. Sign in to add your voice and help keep defenders ahead.
Want to contribute mitigation steps or threat intel context? Sign in or create an account to join the community discussion.
Actions
Updates to AI analysis require Pro Console access. Upgrade inside Console → Billing.
External Links
Need more coverage?
Upgrade to Pro Console for AI refresh and higher limits.
For incident response and remediation, OffSeq services can help resolve threats faster.
Latest Threats
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.