TrueBooker – Appointment Booking and Scheduler System

Wordfence Intelligence   >   Vulnerability Database   >   WordPress Plugins   >   TrueBooker – Appointment Booking and Scheduler System

Information

Software Type Plugin
Software Slug truebooker-appointment-booking (view on wordpress.org)
Software Status Active
Software Author themetechmount
Software Website wordpress.org
Software Downloads 21,458
Software Active Installs 600
Software Record Last Updated October 16, 2026

Showing 1-20 of 21 Vulnerabilities

Submit a Vulnerability
TrueBooker – Appointment Booking and Scheduler System <= 1.2.9 - Missing Authorization to Unauthenticated Settings Update
5.3
CVE-2026-39798
Oct 5, 2026
Researcher: Abdullah Kareem "cyberkareem"
TrueBooker <= 1.2.3 - Missing Authorization to Unauthenticated Arbitrary User Email Modification via 'admin_addcustomer' AJAX Action
9.8
CVE-2026-14349
Sep 15, 2026
Researcher: Devlin Jenkins
TrueBooker – Appointment Booking and Scheduler System < 1.2.7 - Missing Authorization
5.3
CVE-2026-18777
Aug 21, 2026
Researcher: Mokksh Parekh
TrueBooker – Appointment Booking and Scheduler System < 1.2.7 - Unauthenticated Privilege Escalation
7.3
CVE-2026-18776
Aug 21, 2026
Researcher: Abdullah Kareem
TrueBooker – Appointment Booking and Scheduler System < 1.2.7 - Unauthenticated Information Exposure
5.3
CVE-2026-18778
Aug 21, 2026
Researcher: Luka Zimonjic
TrueBooker – Appointment Booking and Scheduler System < 1.2.7 - Missing Authorization
5.3
CVE-2026-18779
Aug 21, 2026
Researcher: Erwan LR
TrueBooker – Appointment Booking and Scheduler System <= 1.2.6 - Unauthenticated Privilege Escalation
7.3
CVE-2026-73347
Aug 19, 2026
Researcher: Abdullah Kareem "cyberkareem"
TrueBooker <= 1.2.6 - Unauthenticated Authorization Bypass Through User-Controlled Key to Account Takeover to 'truebooker_wp_user_id' Parameter
9.8
CVE-2026-18315
Aug 18, 2026
Researcher: Décio Brandão
TrueBooker <= 1.2.6 - Unauthenticated Account Takeover via Insecure Direct Object Reference in 'truebooker_wp_user_id' Parameter
9.8
CVE-2026-16142
Aug 14, 2026
Researcher: Nabil Irawan
TrueBooker <= 1.2.3 - Missing Authorization to Unauthenticated Arbitrary Password Reset via 'tbab-userid'
9.8
CVE-2026-14364
Aug 6, 2026
Researcher: thevietronin
TrueBooker <= 1.2.3 - Missing Authorization to Unauthenticated Arbitrary Password Reset via 'truebooker_wp_user_id'
9.8
CVE-2026-14365
Aug 6, 2026
Researcher: Nhien Pham (nhienit) (nhienit)
TrueBooker <= 1.2.2 - Unauthenticated SQL Injection
7.5
CVE-2026-13161
Jul 27, 2026
Researcher: Karan J
TrueBooker – Appointment Booking and Scheduler System <= 1.2.3 - Unauthenticated Privilege Escalation
9.8
CVE-2026-61951
Jul 17, 2026
Researcher: yangsori
TrueBooker – Appointment Booking and Scheduler System <= 1.2.3 - Unauthenticated SQL Injection
7.5
CVE-2026-61950
Jul 16, 2026
Researcher: Nguyen Dinh Hai (HaiND)
TrueBooker – Appointment Booking and Scheduler System <= 1.1.9 - Missing Authorization
5.3
CVE-2026-48881
Jun 2, 2026
Researcher: Vincent Sevkli
Truebooker - Appointment Booking and Scheduler Plugin <= 1.1.4 - Sensitive Information Exposure via Views Files
5.3
CVE-2026-1797
Mar 30, 2026
Researcher: Kazuma Matsumoto
TrueBooker <= 1.1.6 - Missing Authorization
5.3
CVE-2026-39663
Feb 18, 2026
Researcher: Nabil Irawan
TrueBooker <= 1.1.0 - Missing Authorization
5.3
CVE-2025-67581
Dec 15, 2025
Researcher: daroo
TrueBooker <= 1.0.7 - Cross-Site Request Forgery
4.3
CVE-2025-47543
May 7, 2025
Researcher: haudayroi
TrueBooker <= 1.0.2 - Cross-Site Request Forgery to Settings Update
4.3
CVE-2024-6925
Aug 10, 2024
Researcher: Bob Matyas
Title Status CVE ID CVSS Researchers Date
TrueBooker – Appointment Booking and Scheduler System <= 1.2.9 - Missing Authorization to Unauthenticated Settings Update Unpatched CVE-2026-39798 5.3 Abdullah Kareem "cyberkareem" October 5, 2026
TrueBooker <= 1.2.3 - Missing Authorization to Unauthenticated Arbitrary User Email Modification via 'admin_addcustomer' AJAX Action Patched CVE-2026-14349 9.8 Devlin Jenkins September 15, 2026
TrueBooker – Appointment Booking and Scheduler System < 1.2.7 - Missing Authorization Patched CVE-2026-18777 5.3 Mokksh Parekh August 21, 2026
TrueBooker – Appointment Booking and Scheduler System < 1.2.7 - Unauthenticated Privilege Escalation Patched CVE-2026-18776 7.3 Abdullah Kareem August 21, 2026
TrueBooker – Appointment Booking and Scheduler System < 1.2.7 - Unauthenticated Information Exposure Patched CVE-2026-18778 5.3 Luka Zimonjic August 21, 2026
TrueBooker – Appointment Booking and Scheduler System < 1.2.7 - Missing Authorization Patched CVE-2026-18779 5.3 Erwan LR August 21, 2026
TrueBooker – Appointment Booking and Scheduler System <= 1.2.6 - Unauthenticated Privilege Escalation Patched CVE-2026-73347 7.3 Abdullah Kareem "cyberkareem" August 19, 2026
TrueBooker <= 1.2.6 - Unauthenticated Authorization Bypass Through User-Controlled Key to Account Takeover to 'truebooker_wp_user_id' Parameter Patched CVE-2026-18315 9.8 Décio Brandão August 18, 2026
TrueBooker <= 1.2.6 - Unauthenticated Account Takeover via Insecure Direct Object Reference in 'truebooker_wp_user_id' Parameter Patched CVE-2026-16142 9.8 Nabil Irawan August 14, 2026
TrueBooker <= 1.2.3 - Missing Authorization to Unauthenticated Arbitrary Password Reset via 'tbab-userid' Patched CVE-2026-14364 9.8 thevietronin August 6, 2026
TrueBooker <= 1.2.3 - Missing Authorization to Unauthenticated Arbitrary Password Reset via 'truebooker_wp_user_id' Patched CVE-2026-14365 9.8 Nhien Pham (nhienit) (nhienit) August 6, 2026
TrueBooker <= 1.2.2 - Unauthenticated SQL Injection Patched CVE-2026-13161 7.5 Karan J July 27, 2026
TrueBooker – Appointment Booking and Scheduler System <= 1.2.3 - Unauthenticated Privilege Escalation Patched CVE-2026-61951 9.8 yangsori July 17, 2026
TrueBooker – Appointment Booking and Scheduler System <= 1.2.3 - Unauthenticated SQL Injection Patched CVE-2026-61950 7.5 Nguyen Dinh Hai (HaiND) July 16, 2026
TrueBooker – Appointment Booking and Scheduler System <= 1.1.9 - Missing Authorization Patched CVE-2026-48881 5.3 Vincent Sevkli June 2, 2026
Truebooker - Appointment Booking and Scheduler Plugin <= 1.1.4 - Sensitive Information Exposure via Views Files Patched CVE-2026-1797 5.3 Kazuma Matsumoto March 30, 2026
TrueBooker <= 1.1.6 - Missing Authorization Patched CVE-2026-39663 5.3 Nabil Irawan February 18, 2026
TrueBooker <= 1.1.0 - Missing Authorization Patched CVE-2025-67581 5.3 daroo December 15, 2025
TrueBooker <= 1.0.7 - Cross-Site Request Forgery Patched CVE-2025-47543 4.3 haudayroi May 7, 2025
TrueBooker <= 1.0.2 - Cross-Site Request Forgery to Settings Update Patched CVE-2024-6925 4.3 Bob Matyas August 10, 2024

Did you know Wordfence Intelligence provides free personal and commercial API access to our comprehensive WordPress vulnerability database, along with a free webhook integration to stay on top of the latest vulnerabilities added and updated in the database? Get started today!

Learn more

Want to get notified of the latest vulnerabilities that may affect your WordPress site?
Install Wordfence on your site today to get notified immediately if your site is affected by a vulnerability that has been added to our database.

Get Wordfence

The Wordfence Intelligence WordPress vulnerability database is completely free to access and query via API. Please review the documentation on how to access and consume the vulnerability data via API.

Documentation