Lucene search
K

65 matches found

Nuclei
Nuclei
added yesterday28 views

TrueBooker <= 1.0.2 - SQL Injection

The TrueBooker Appointment Booking and Scheduler Plugin. plugin for WordPress is vulnerable to SQL Injection in all versions up to, and including, 1.0.2 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. This makes it possible...

9.8CVSS6AI score0.03292EPSS
Exploits1References2
NVD
NVD
added 2026/06/15 9:17 p.m.3 views

CVE-2026-48881

Unauthenticated Broken Access Control in TrueBooker = 1.1.9 versions...

9.1CVSS0.00278EPSS
Exploits0References1
EUVD
EUVD
added 2026/06/15 8:19 p.m.10 views

EUVD-2026-36856

Unauthenticated Broken Access Control in TrueBooker = 1.1.9 versions...

9.1CVSS5.1AI score0.00278EPSS
Exploits0References1
CVE
CVE
added 2026/06/15 8:19 p.m.11 views

CVE-2026-48881

Summary: CVE-2026-48881 affects the WordPress TrueBooker plugin (

9.1CVSS5.1AI score0.00278EPSS
Exploits0References1
Cvelist
Cvelist
added 2026/06/15 8:19 p.m.24 views

CVE-2026-48881 WordPress TrueBooker plugin <= 1.1.9 - Broken Access Control vulnerability

Unauthenticated Broken Access Control in TrueBooker = 1.1.9 versions...

9.1CVSS0.00278EPSS
Exploits0References1
Positive Technologies
Positive Technologies
added 2026/06/15 12:0 a.m.7 views

PT-2026-49486

Unauthenticated Broken Access Control in TrueBooker = 1.1.9 versions...

9.1CVSS5.1AI score0.00278EPSS
Exploits0References2
Patchstack
Patchstack
added 2026/06/02 2:15 p.m.5 views

WordPress TrueBooker plugin <= 1.1.9 - Broken Access Control vulnerability

Broken Access Control vulnerability discovered by Vincent Sevkli in WordPress Plugin TrueBooker versions = 1.1.9...

9.1CVSS5.8AI score0.00278EPSS
Exploits0Affected Software1
RedhatCVE
RedhatCVE
added 2026/04/13 7:25 p.m.4 views

CVE-2026-39663

Missing Authorization vulnerability in themetechmount TrueBooker truebooker-appointment-booking allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects TrueBooker: from n/a through = 1.1.5...

5.3CVSS5.8AI score0.00214EPSS
Exploits0References1
EUVD
EUVD
added 2026/04/08 9:31 a.m.6 views

EUVD-2026-20334

Missing Authorization vulnerability in themetechmount TrueBooker truebooker-appointment-booking allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects TrueBooker: from n/a through = 1.1.5...

5.9AI score0.00214EPSS
Exploits0References2
NVD
NVD
added 2026/04/08 9:16 a.m.5 views

CVE-2026-39663

Missing Authorization vulnerability in themetechmount TrueBooker truebooker-appointment-booking allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects TrueBooker: from n/a through = 1.1.5...

5.3CVSS0.00214EPSS
Exploits0References1
CVE
CVE
added 2026/04/08 8:30 a.m.5 views

CVE-2026-39663

WordPress plugin TrueBooker (truebooker-appointment-booking) for the WordPress plugin “TrueBooker” is affected by CVE-2026-39663 with a broken access control vulnerability due to missing authorization. Affected scope includes TrueBooker versions up to and including 1.1.5. The vulnerability arises...

5.3CVSS5.9AI score0.00214EPSS
Exploits0References1
Cvelist
Cvelist
added 2026/04/08 8:30 a.m.20 views

CVE-2026-39663 WordPress TrueBooker plugin <= 1.1.5 - Broken Access Control vulnerability

Missing Authorization vulnerability in themetechmount TrueBooker truebooker-appointment-booking allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects TrueBooker: from n/a through = 1.1.5...

5.3CVSS0.00214EPSS
Exploits0References1
Vulnrichment
Vulnrichment
added 2026/04/08 8:30 a.m.2 views

CVE-2026-39663 WordPress TrueBooker plugin <= 1.1.5 - Broken Access Control vulnerability

Missing Authorization vulnerability in themetechmount TrueBooker truebooker-appointment-booking allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects TrueBooker: from n/a through = 1.1.5...

5.3CVSS5.8AI score0.00214EPSS
Exploits0References1
ATTACKERKB
ATTACKERKB
added 2026/04/08 8:30 a.m.6 views

CVE-2026-39663

Missing Authorization vulnerability in themetechmount TrueBooker truebooker-appointment-booking allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects TrueBooker: from n/a through = 1.1.5...

5.9AI score0.00214EPSS
Exploits0References2
Positive Technologies
Positive Technologies
added 2026/04/08 12:0 a.m.5 views

PT-2026-31225

Missing Authorization vulnerability in themetechmount TrueBooker truebooker-appointment-booking allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects TrueBooker: from n/a through = 1.1.5...

5.9AI score0.00214EPSS
Exploits0References4
CNNVD
CNNVD
added 2026/04/08 12:0 a.m.5 views

WordPress plugin TrueBooker 安全漏洞

WordPress and WordPress plugins are both products of the WordPress Foundation. WordPress is a blog platform developed using the PHP language. This platform allows for the creation of personal blog websites on servers based on PHP and MySQL. A WordPress plugin is an application extension. WordPres...

5.3CVSS5.8AI score0.00214EPSS
Exploits0References1
RedhatCVE
RedhatCVE
added 2026/04/01 5:0 a.m.4 views

CVE-2026-1797

The Appointment Booking and Scheduler Plugin – Truebooker plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 1.1.4 through views php files. This makes it possible for unauthenticated attackers to view potentially sensitive information...

5.3CVSS5.9AI score0.00205EPSS
Exploits0References1
EUVD
EUVD
added 2026/03/31 6:31 a.m.3 views

EUVD-2026-17317

The Appointment Booking and Scheduler Plugin – Truebooker plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 1.1.4 through views php files. This makes it possible for unauthenticated attackers to view potentially sensitive information...

5.3CVSS5.9AI score0.00205EPSS
Exploits0References3
NVD
NVD
added 2026/03/31 5:16 a.m.4 views

CVE-2026-1797

The Appointment Booking and Scheduler Plugin – Truebooker plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 1.1.4 through views php files. This makes it possible for unauthenticated attackers to view potentially sensitive information...

5.3CVSS0.00205EPSS
Exploits0References2
Vulnrichment
Vulnrichment
added 2026/03/31 4:25 a.m.2 views

CVE-2026-1797 Truebooker - Appointment Booking and Scheduler Plugin <= 1.1.4 - Sensitive Information Exposure via Views Files

The Appointment Booking and Scheduler Plugin – Truebooker plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 1.1.4 through views php files. This makes it possible for unauthenticated attackers to view potentially sensitive information...

5.3CVSS5.9AI score0.00205EPSS
Exploits0References2
Rows per page
Query Builder