WordPress TrueBooker plugin <= 1.2.3 - SQL Injection vulnerability

SQL Injection vulnerability discovered by HaiND in WordPress Plugin TrueBooker versions = 1.2.3...

CVE-2026-39663

WordPress plugin TrueBooker (truebooker-appointment-booking) for the WordPress plugin “TrueBooker” is affected by CVE-2026-39663 with a broken access control vulnerability due to missing authorization. Affected scope includes TrueBooker versions up to and including 1.1.5. The vulnerability arises...