7 matches found
CVE-2026-13161 TrueBooker <= 1.2.2 - Unauthenticated SQL Injection
The TrueBooker – Appointment Booking and Scheduler System plugin for WordPress is vulnerable to generic SQL Injection via the 'alldatatruebookeruser' parameter in all versions up to, and including, 1.2.2 due to insufficient escaping on the user supplied parameter and lack of sufficient preparatio...
EUVD-2025-13793
Malicious code in bioql PyPI...
CVE-2025-47543
Cross-Site Request Forgery CSRF vulnerability in themetechmount TrueBooker truebooker-appointment-booking allows Cross Site Request Forgery.This issue affects TrueBooker: from n/a through = 1.0.7...
CVE-2025-47543
Cross-Site Request Forgery CSRF vulnerability in themetechmount TrueBooker truebooker-appointment-booking allows Cross Site Request Forgery.This issue affects TrueBooker: from n/a through = 1.0.7...
CVE-2025-47543 WordPress TrueBooker plugin <= 1.0.7 - Cross Site Request Forgery (CSRF) Vulnerability
Cross-Site Request Forgery CSRF vulnerability in themetechmount TrueBooker truebooker-appointment-booking allows Cross Site Request Forgery.This issue affects TrueBooker: from n/a through = 1.0.7...
CVE-2025-47543 WordPress TrueBooker <= 1.0.7 - Cross Site Request Forgery (CSRF) Vulnerability
Cross-Site Request Forgery CSRF vulnerability in themetechmount TrueBooker allows Cross Site Request Forgery. This issue affects TrueBooker: from n/a through 1.0.7...
CVE-2025-47543
CVE-2025-47543 is a CSRF vulnerability in WordPress plugin TrueBooker (Appointment Booking and Scheduler) affecting versions up to 1.0.7. The vulnerability is documented with CVSS v3.1 base score 4.3 (Medium) and requires user interaction. Wordfence’s vulnerability detail notes the issue and indi...