Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%

TrueBooker — Vulnerabilities & Security Advisories 15

All 15 CVE vulnerabilities found in TrueBooker, with AI-generated Chinese analysis, references, and POCs.

This page documents known vulnerabilities associated with the TrueBooker booking platform, categorized by Common Weakness Enumerations. It aggregates security data from multiple vendors and sources to provide a comprehensive view of risks affecting this specific software ecosystem. The collected records include diverse weakness types such as input validation errors, authentication bypasses, and server-side request forgery, spanning a historical period from initial release to the present day. This timeframe ensures that both legacy and recently patched issues are available for review, allowing users to see the evolution of security posture over time. Visitors to this page can effectively track a vendor's advisories as they are released, helping organizations stay informed about critical updates. Users can also understand a weakness class by examining how different implementations of TrueBooker have been exploited or affected by similar flaws across the industry. Additionally, one can look up a product's vulnerability history to assess long-term stability and risk trends. The data is structured to facilitate easier comparison between different versions and patches, supporting informed decision-making for security teams. By centralizing this information, the page aims to reduce the time spent searching for disjointed reports while providing a clear, factual basis for risk assessment and remediation planning.

Vendor: Unknown

CVE ID Title CVSS Severity Published
CVE-2026-39798 WordPress TrueBooker plugin <= 1.2.9 - Settings Change vulnerability CWE-862 6.5 Medium 2026-10-06
CVE-2026-73347 WordPress TrueBooker plugin <= 1.2.6 - Privilege Escalation vulnerability CWE-266 9.8 Critical 2026-08-19
CVE-2026-18776 TrueBooker Appointment Booking < 1.2.7 - Unauthenticated Account Takeover via Multiple AJAX Actions - - 2026-08-19
CVE-2026-18778 TrueBooker Appointment Booking < 1.2.7 - Unauthenticated Customer PII Disclosure via Multiple AJAX Actions - - 2026-08-19
CVE-2026-18777 TrueBooker Appointment Booking < 1.2.7 - Unauthenticated Arbitrary Appointment Status Change via update_appointment_status - - 2026-08-19
CVE-2026-18779 TrueBooker Appointment Booking < 1.2.7 - Unauthenticated Appointment and Payment Record Deletion via update_appointment_booked - - 2026-08-19
CVE-2026-14545 TrueBooker Appointment Booking < 1.2.4 - Unauthenticated Account Takeover via Password Reset - - 2026-07-28
CVE-2026-61951 WordPress TrueBooker plugin <= 1.2.3 - Privilege Escalation vulnerability CWE-266 9.8 Critical 2026-07-23
CVE-2026-61950 WordPress TrueBooker plugin <= 1.2.3 - SQL Injection vulnerability CWE-89 9.3 Critical 2026-07-23
CVE-2026-48881 WordPress TrueBooker plugin <= 1.1.9 - Broken Access Control vulnerability CWE-862 9.1 Critical 2026-06-15
CVE-2026-39663 WordPress TrueBooker plugin <= 1.1.5 - Broken Access Control vulnerability CWE-862 5.3 Medium 2026-04-08
CVE-2025-67581 WordPress TrueBooker plugin <= 1.1.0 - Broken Access Control vulnerability CWE-862 5.3 Medium 2025-12-09
CVE-2025-47543 WordPress TrueBooker plugin <= 1.0.7 - Cross Site Request Forgery (CSRF) Vulnerability CWE-352 4.3 Medium 2025-05-07
CVE-2024-6924 TrueBooker < 1.0.3 - Multiple Unauthenticated SQLi 9.8AI Critical AI 2024-09-08
CVE-2024-6925 TrueBooker < 1.0.3 - Settings Update via CSRF 4.3AI Medium AI 2024-09-08

All 15 known CVE vulnerabilities affecting TrueBooker with full Chinese analysis, references, and POCs where available.