TrueBooker
ThemetechMount
Developer
1.2.8
Latest version
600
Installations
No date
Last updated
Vulnerability history
0 present
20 patched
12 Mitigation rules
- Unauthenticated Appointment and Payment Record Deletion via update_appointment_booked vulnerability< 1.2.721/08/2026
- Unauthenticated Account Takeover via Multiple AJAX Actions vulnerability< 1.2.721/08/2026
- Unauthenticated Arbitrary Appointment Status Change via update_appointment_status vulnerability< 1.2.721/08/2026
- Unauthenticated Customer PII Disclosure via Multiple AJAX Actions vulnerability< 1.2.721/08/2026
- Unauthenticated Authorization Bypass Through User-Controlled Key to Account Takeover to 'truebooker_wp_user_id' Parameter vulnerability<= 1.2.620/08/2026
- Privilege Escalation vulnerability<= 1.2.619/08/2026
- Unauthenticated Account Takeover via Insecure Direct Object Reference in 'truebooker_wp_user_id' Parameter vulnerability<= 1.2.617/08/2026
- Missing Authorization to Unauthenticated Arbitrary Password Reset vulnerability<= 1.2.311/08/2026
- Missing Authorization to Unauthenticated Arbitrary Password Reset vulnerability<= 1.2.311/08/2026
- Unauthenticated SQL Injection vulnerability<= 1.2.231/07/2026
- Unauthenticated Account Takeover vulnerability< 1.2.430/07/2026
- Privilege Escalation vulnerability<= 1.2.317/07/2026
- SQL Injection vulnerability<= 1.2.316/07/2026
- Broken Access Control vulnerability<= 1.1.902/06/2026
- WordPress Truebooker - Appointment Booking and Scheduler Plugin plugin <= 1.1.4 - Sensitive Information Exposure via Views Files vulnerability<= 1.1.431/03/2026
- Broken Access Control vulnerability<= 1.1.618/02/2026
- Broken Access Control vulnerability<= 1.1.015/12/2025
- Cross Site Request Forgery (CSRF) Vulnerability<= 1.0.707/05/2025
- Multiple Unauthenticated SQLi vulnerability<= 1.0.215/08/2024
- Settings Update via CSRF vulnerability<= 1.0.215/08/2024