TrueBooker – Appointment Booking and Scheduler System — Vulnerabilities & Security Advisories 6

All 6 CVE vulnerabilities found in TrueBooker – Appointment Booking and Scheduler System, with AI-generated Chinese analysis, references, and POCs.

Vendor: themetechmount

CVE ID	Title	CVSS	Severity	Published
CVE-2026-18315	TrueBooker <= 1.2.6 - Unauthenticated Authorization Bypass Through User-Controlled Key to Account Takeover to 'truebooker_wp_user_id' Parameter CWE-639	9.8	Critical	2026-08-19
CVE-2026-16142	TrueBooker <= 1.2.6 - Unauthenticated Account Takeover via Insecure Direct Object Reference in 'truebooker_wp_user_id' Parameter CWE-639	9.8	Critical	2026-08-15
CVE-2026-14364	TrueBooker <= 1.2.3 - Missing Authorization to Unauthenticated Arbitrary Password Reset via 'tbab-userid' CWE-640	9.8	Critical	2026-08-07
CVE-2026-14365	TrueBooker <= 1.2.3 - Missing Authorization to Unauthenticated Arbitrary Password Reset via 'truebooker_wp_user_id' CWE-862	9.8	Critical	2026-08-07
CVE-2026-13161	TrueBooker <= 1.2.2 - Unauthenticated SQL Injection CWE-89	7.5	High	2026-07-28
CVE-2026-1797	Truebooker - Appointment Booking and Scheduler Plugin <= 1.1.4 - Sensitive Information Exposure via Views Files CWE-862	5.3	Medium	2026-03-31

All 6 known CVE vulnerabilities affecting TrueBooker – Appointment Booking and Scheduler System with full Chinese analysis, references, and POCs where available.