CVE-2024-6924

CVE-2024-6924 concerns the TrueBooker WordPress plugin. Public details confirm a SQL injection in the plugin’s code path handling an AJAX action, triggered by unauthenticated users. The CVE description (initial) states impact for versions before 1.0.3. The connected Nuclei template corroborates a...

CVE-2024-6925

CVE-2024-6925 affects the TrueBooker WordPress plugin. Technical details in connected sources show that prior to version 1.0.3, the plugin did not perform a CSRF check when updating its settings, enabling a logged-in admin to be coerced into changing settings via CSRF. Red Hat notes mirror this d...

CVE-2025-47543

CVE-2025-47543 is a CSRF vulnerability in WordPress plugin TrueBooker (Appointment Booking and Scheduler) affecting versions up to 1.0.7. The vulnerability is documented with CVSS v3.1 base score 4.3 (Medium) and requires user interaction. Wordfence’s vulnerability detail notes the issue and indi...