<?xml version="1.0" encoding="UTF-8"?><rss version="2.0"><channel><title>agentprime: themetechmount-truebooker-appointment-booking-and-scheduler-system</title><description>Every new CVE for themetechmount-truebooker-appointment-booking-and-scheduler-system.</description><link>https://agentprime.io/</link><item><title>CVE-2026-14349: TrueBooker &lt;= 1.2.3 - Missing Authorization to Unauthenticated Arbitrary User Email Modification via &apos;admin_addcustomer&apos; AJAX Action</title><link>https://agentprime.io/advisories/CVE-2026-14349/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-14349/</guid><description>CVSS 9.8 (Critical). Critical: CVSS score 9.8: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Wed, 16 Sep 2026 03:28:17 GMT</pubDate><category>CVE</category><category>critical</category></item><item><title>CVE-2026-18315: TrueBooker &lt;= 1.2.6 - Unauthenticated Authorization Bypass Through User-Controlled Key to Account Takeover to &apos;truebooker_wp_user_id&apos; Parameter</title><link>https://agentprime.io/advisories/CVE-2026-18315/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-18315/</guid><description>CVSS 9.8 (Critical). Critical: CVSS score 9.8: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Wed, 19 Aug 2026 18:27:41 GMT</pubDate><category>CVE</category><category>critical</category></item><item><title>CVE-2026-16142: TrueBooker &lt;= 1.2.6 - Unauthenticated Account Takeover via Insecure Direct Object Reference in &apos;truebooker_wp_user_id&apos; Parameter</title><link>https://agentprime.io/advisories/CVE-2026-16142/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-16142/</guid><description>CVSS 9.8 (Critical). Critical: CVSS score 9.8: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Sat, 15 Aug 2026 08:27:16 GMT</pubDate><category>CVE</category><category>critical</category></item><item><title>CVE-2026-14364: TrueBooker &lt;= 1.2.3 - Missing Authorization to Unauthenticated Arbitrary Password Reset via &apos;tbab-userid&apos;</title><link>https://agentprime.io/advisories/CVE-2026-14364/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-14364/</guid><description>CVSS 9.8 (Critical). Critical: CVSS score 9.8: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Fri, 07 Aug 2026 04:25:56 GMT</pubDate><category>CVE</category><category>critical</category></item><item><title>CVE-2026-14365: TrueBooker &lt;= 1.2.3 - Missing Authorization to Unauthenticated Arbitrary Password Reset via &apos;truebooker_wp_user_id&apos;</title><link>https://agentprime.io/advisories/CVE-2026-14365/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-14365/</guid><description>CVSS 9.8 (Critical). Critical: CVSS score 9.8: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Fri, 07 Aug 2026 04:25:54 GMT</pubDate><category>CVE</category><category>critical</category></item><item><title>CVE-2026-13161: TrueBooker &lt;= 1.2.2 - Unauthenticated SQL Injection</title><link>https://agentprime.io/advisories/CVE-2026-13161/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-13161/</guid><description>CVSS 7.5 (High). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Tue, 28 Jul 2026 08:34:36 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-1797: Truebooker - Appointment Booking and Scheduler Plugin &lt;= 1.1.4 - Sensitive Information Exposure via Views Files</title><link>https://agentprime.io/advisories/CVE-2026-1797/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-1797/</guid><description>CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Tue, 31 Mar 2026 04:25:31 GMT</pubDate><category>CVE</category></item></channel></rss>