Advisories · Technology
TrueBooker.
Every CVE that names TrueBooker among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
- CVSS 5.3 Medium
TrueBooker Appointment Booking 1.1.9 - 1.2.9 - Unauthenticated Service and Category Creation and Modification
- TrueBooker
- Broken access control
- CVSS 5.3 Medium
TrueBooker Appointment Booking 1.1.9 - 1.2.9 - Unauthenticated Booking Creation with Arbitrary Price via Multiple AJAX Actions
- TrueBooker
- Broken access control
- CVSS 5.3 Medium
TrueBooker Appointment Booking 1.1.9 - 1.2.9 - Unauthenticated Customer PII Disclosure via IDOR in 'refappbkd' Parameter
- TrueBooker
- Broken access control
- CVSS 5.3 Medium
TrueBooker Appointment Booking 1.1.9 - 1.2.9 - Unauthenticated Plugin Settings Overwrite via admin_setting_setup_data
- TrueBooker
- Broken access control
- CVSS 5.3 Medium
TrueBooker Appointment Booking < 1.2.7 - Unauthenticated Appointment and Payment Record Deletion via update_appointment_booked
- TrueBooker
- Broken access control
- CVSS 5.3 Medium
TrueBooker Appointment Booking < 1.2.7 - Unauthenticated Customer PII Disclosure via Multiple AJAX Actions
- TrueBooker
- Information disclosure
- CVSS 5.3 Medium
TrueBooker Appointment Booking < 1.2.7 - Unauthenticated Arbitrary Appointment Status Change via update_appointment_status
- TrueBooker
- Broken access control
- CVSS 9.8 CriticalCritical · CVSS 9+
TrueBooker Appointment Booking < 1.2.7 - Unauthenticated Account Takeover via Multiple AJAX Actions
- TrueBooker
- Broken access control
- CVSS 9.8 CriticalCritical · CVSS 9+
TrueBooker Appointment Booking < 1.2.4 - Unauthenticated Account Takeover via Password Reset
- TrueBooker
- Privilege escalation
- CVSS 4.3 Medium
TrueBooker < 1.0.3 - Settings Update via CSRF
- TrueBooker
- CVSS 9.8 CriticalCritical · CVSS 9+
TrueBooker < 1.0.3 - Multiple Unauthenticated SQLi
- TrueBooker