| CVE-2026-94230 |
The TrueBooker WordPress plugin before 1.3.0 does not have authorisation checks in some of its AJAX actions, and does…
|
5.3
Medium
|
Oct 19, 2026 |
| CVE-2026-94231 |
The TrueBooker WordPress plugin before 1.3.0 does not have authorisation checks in place in some of its functionality,…
|
5.3
Medium
|
Oct 19, 2026 |
| CVE-2026-94229 |
The TrueBooker WordPress plugin before 1.3.0 does not verify that the requester owns a booking before rendering its…
|
5.3
Medium
|
Oct 19, 2026 |
| CVE-2026-94228 |
The TrueBooker WordPress plugin before 1.3.0 does not perform any capability check on one of its setup handlers, and the…
|
5.3
Medium
|
Oct 19, 2026 |
| CVE-2026-18779 |
The TrueBooker WordPress plugin before 1.2.7 does not have proper authorisation checks in one of its AJAX actions,…
|
5.3
Medium
|
Aug 19, 2026 |
| CVE-2026-18778 |
The TrueBooker WordPress plugin before 1.2.7 does not have proper authorisation checks in some of its AJAX actions,…
|
5.3
Medium
|
Aug 19, 2026 |
| CVE-2026-18776 |
The TrueBooker WordPress plugin before 1.2.7 does not have proper authorisation checks in some of its AJAX actions,…
|
9.8
Critical
|
Aug 19, 2026 |
| CVE-2026-18777 |
The TrueBooker WordPress plugin before 1.2.7 does not have proper authorisation checks in one of its AJAX actions,…
|
5.3
Medium
|
Aug 19, 2026 |
| CVE-2026-14545 |
The TrueBooker WordPress plugin before 1.2.4 does not validate account ownership when resetting a user's password…
|
9.8
Critical
|
Jul 28, 2026 |
| CVE-2024-6924 |
The TrueBooker WordPress plugin before 1.0.3 does not properly sanitise and escape a parameter before using it in a SQL…
|
9.8
Critical
|
Sep 8, 2024 |
| CVE-2024-6925 |
The TrueBooker WordPress plugin before 1.0.3 does not have CSRF check in place when updating its settings, which…
|
4.3
Medium
|
Sep 8, 2024 |