| CVE-2026-94230 |
The TrueBooker WordPress plugin before 1.3.0 does not have authorisation checks in some of its AJAX actions, and does…
|
5.3
Moyenne
|
19 oct. 2026 |
| CVE-2026-94231 |
The TrueBooker WordPress plugin before 1.3.0 does not have authorisation checks in place in some of its functionality,…
|
5.3
Moyenne
|
19 oct. 2026 |
| CVE-2026-94229 |
The TrueBooker WordPress plugin before 1.3.0 does not verify that the requester owns a booking before rendering its…
|
5.3
Moyenne
|
19 oct. 2026 |
| CVE-2026-94228 |
The TrueBooker WordPress plugin before 1.3.0 does not perform any capability check on one of its setup handlers, and the…
|
5.3
Moyenne
|
19 oct. 2026 |
| CVE-2026-18779 |
The TrueBooker WordPress plugin before 1.2.7 does not have proper authorisation checks in one of its AJAX actions,…
|
5.3
Moyenne
|
19 août 2026 |
| CVE-2026-18778 |
The TrueBooker WordPress plugin before 1.2.7 does not have proper authorisation checks in some of its AJAX actions,…
|
5.3
Moyenne
|
19 août 2026 |
| CVE-2026-18776 |
The TrueBooker WordPress plugin before 1.2.7 does not have proper authorisation checks in some of its AJAX actions,…
|
9.8
Critique
|
19 août 2026 |
| CVE-2026-18777 |
The TrueBooker WordPress plugin before 1.2.7 does not have proper authorisation checks in one of its AJAX actions,…
|
5.3
Moyenne
|
19 août 2026 |
| CVE-2026-14545 |
The TrueBooker WordPress plugin before 1.2.4 does not validate account ownership when resetting a user's password…
|
9.8
Critique
|
28 juil. 2026 |
| CVE-2024-6924 |
The TrueBooker WordPress plugin before 1.0.3 does not properly sanitise and escape a parameter before using it in a SQL…
|
9.8
Critique
|
8 sept. 2024 |
| CVE-2024-6925 |
The TrueBooker WordPress plugin before 1.0.3 does not have CSRF check in place when updating its settings, which…
|
4.3
Moyenne
|
8 sept. 2024 |