Threat database

Unauthenticated Settings Change in TrueBooker <= 1.2.9 versions.

The TrueBooker – Appointment Booking and Scheduler System WordPress plugin up to version 1.2.3 contains an authorization bypass vulnerability. This flaw allows unauthenticated attackers to modify the email address of any user account, including administrators. Exploiting this can enable attackers to reset passwords and gain unauthorized access to accounts.

The TrueBooker Appointment Booking and Scheduler System WordPress plugin is vulnerable to an authorization bypass vulnerability in all versions up to and including 1.2.6. The flaw allows unauthenticated attackers to overwrite the email address of any WordPress user, including administrators, by exploiting an AJAX handler that lacks proper authentication and capability checks. This can lead to full account takeover via the standard WordPress password reset process.

CVE-2026-73347 is a critical vulnerability in ThemetechMount's TrueBooker software versions up to and including 1.2.6. It allows unauthenticated users to escalate privileges due to incorrect privilege assignment. The vulnerability has a very high CVSS score of 9.8, indicating severe impact on confidentiality, integrity, and availability.

The TrueBooker plugin for WordPress is vulnerable to Account Takeover in all versions up to, and including, 1.2.6. This is due to the add_front_user_update() AJAX handler being registered for unauthenticated users and accepting an arbitrary truebooker_wp_user_id value, which is passed directly to wp_update_user() without verifying authentication or ownership. This makes it possible for unauthenticated attackers to change any WordPress user account email address, including an administrator, by submitting the target user ID and an attacker-controlled email address. An attacker can then use the native WordPress password reset flow to receive the reset link at the attacker-controlled email address and take over the account.

The TrueBooker – Appointment Booking and Scheduler System WordPress plugin up to version 1.2.3 contains a critical vulnerability in its password recovery mechanism. The plugin does not properly validate user identity during password reset requests, allowing unauthenticated attackers to reset passwords of arbitrary accounts, including administrators. This flaw enables account takeover with full confidentiality, integrity, and availability impact.

The TrueBooker – Appointment Booking and Scheduler System WordPress plugin up to version 1.2.3 contains an authorization bypass vulnerability. This flaw allows unauthenticated attackers to change passwords of arbitrary user accounts, including administrators. Exploitation could lead to full account takeover and complete compromise of the affected WordPress site.

The TrueBooker – Appointment Booking and Scheduler System plugin for WordPress is vulnerable to generic SQL Injection via the 'alldata[truebooker_user]' parameter in all versions up to, and including, 1.2.2 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. This makes it possible for unauthenticated attackers to append additional SQL queries into already existing queries that can be used to extract sensitive information from the database. The check_ajax_referer() nonce guard does not constitute an authentication or authorization barrier because the nonce is exposed to unauthenticated visitors on TrueBooker front-end booking pages; exploitation additionally requires that the required booking fields (category, service, person, date, and time slot) be present in the alldata POST parameter so that execution reaches the vulnerable SQL query branch.

Unauthenticated Privilege Escalation in TrueBooker <= 1.2.3 versions.

Unauthenticated SQL Injection in TrueBooker <= 1.2.3 versions.

CVE-2026-48881 is a critical vulnerability in themetechmount TrueBooker versions up to and including 1.1.9. It involves unauthenticated broken access control, classified under CWE-862, allowing unauthorized users to access restricted functionality or data. The vulnerability has a high CVSS score of 9.1, indicating severe confidentiality and integrity impacts without requiring authentication or user interaction.

Missing Authorization vulnerability in themetechmount TrueBooker truebooker-appointment-booking allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects TrueBooker: from n/a through <= 1.1.5.

The Appointment Booking and Scheduler Plugin – Truebooker plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 1.1.4 through views php files. This makes it possible for unauthenticated attackers to view potentially sensitive information contained in the exposed views php files via direct access.

Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in ThemetechMount Boldman boldman allows PHP Local File Inclusion.This issue affects Boldman: from n/a through <= 7.7.

Missing Authorization vulnerability in themetechmount TrueBooker truebooker-appointment-booking allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects TrueBooker: from n/a through <= 1.1.0.