Vulnerability history

Unauthenticated Booking Creation with Arbitrary Price vulnerability

Unauthenticated Service and Category Creation and Modification vulnerability

Unauthenticated Customer PII Disclosure vulnerability

Unauthenticated Plugin Settings Overwrite vulnerability

Settings Change vulnerability

Privilege Escalation vulnerability

Unauthenticated Appointment and Payment Record Deletion via update_appointment_booked vulnerability

Unauthenticated Account Takeover via Multiple AJAX Actions vulnerability

Unauthenticated Arbitrary Appointment Status Change via update_appointment_status vulnerability

Unauthenticated Customer PII Disclosure via Multiple AJAX Actions vulnerability

Unauthenticated Authorization Bypass Through User-Controlled Key to Account Takeover to 'truebooker_wp_user_id' Parameter vulnerability

Privilege Escalation vulnerability

Unauthenticated Account Takeover via Insecure Direct Object Reference in 'truebooker_wp_user_id' Parameter vulnerability

Missing Authorization to Unauthenticated Arbitrary Password Reset vulnerability

Missing Authorization to Unauthenticated Arbitrary Password Reset vulnerability

Unauthenticated SQL Injection vulnerability

Unauthenticated Account Takeover vulnerability

Privilege Escalation vulnerability

SQL Injection vulnerability

Broken Access Control vulnerability

WordPress Truebooker - Appointment Booking and Scheduler Plugin plugin <= 1.1.4 - Sensitive Information Exposure via Views Files vulnerability

Broken Access Control vulnerability

Broken Access Control vulnerability

Cross Site Request Forgery (CSRF) Vulnerability

Multiple Unauthenticated SQLi vulnerability

Settings Update via CSRF vulnerability