CVE-2026-13161

CVE-2026-13161 affects the WordPress plugin TrueBooker – Appointment Booking and Scheduler System up to version 1.2.2. The vulnerability is a generic SQL Injection via the parameter alldata[truebooker_user], caused by insufficient escaping and inadequate preparation of the underlying SQL query. I...