Threats tagged 'ghsa-9p7q-wqgp-8mm8'

The TrueBooker – Appointment Booking and Scheduler System WordPress plugin up to version 1.2.3 contains an authorization bypass vulnerability. This flaw allows unauthenticated attackers to change passwords of arbitrary user accounts, including administrators. Exploitation could lead to full account takeover and complete compromise of the affected WordPress site.