This vulnerability in themetechmount TrueBooker, an appointment booking plugin, arises from missing authorization checks due to misconfigured access control. Affected versions include all up to and including 1.1.5. The issue allows attackers to perform unauthorized actions without authentication or user interaction. The CVSS 3.1 vector indicates network attack vector, low attack complexity, no privileges required, no user interaction, unchanged scope, no confidentiality or availability impact, but integrity impact is low. No patch or official remediation level has been published by the vendor as of the data provided.

The vulnerability could allow an unauthenticated attacker to perform unauthorized actions that may alter data integrity within the TrueBooker plugin. There is no impact on confidentiality or availability reported. The medium severity reflects the potential for limited integrity impact without requiring privileges or user interaction. No known exploitation in the wild has been reported.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since no official fix or remediation level is provided, users should monitor vendor communications for updates. Until a patch is available, consider restricting access to the affected plugin or implementing compensating controls to limit exposure.