TrueBooker – Appointment Booking and Scheduler System vulnerabilities
6 known vulnerabilities in TrueBooker – Appointment Booking and Scheduler System from ThemetechMount. 6 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.
Latest first
- 9.8 Critical severity
TrueBooker – Appointment Booking and Scheduler…: Missing Authorization
The TrueBooker – Appointment Booking and Scheduler System plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 1.2.3. This is due to the plugin not properly verifying that a user is authorized to perform an action. T
- 9.8 Critical severity
TrueBooker – Appointment Booking and Scheduler…: Authorization Bypass Through User-Controlled Key
The TrueBooker – Appointment Booking and Scheduler System plugin for WordPress is vulnerable to Authorization Bypass Through User-Controlled Key leading to Account Takeover in all versions up to, and including, 1.2.6. This is due to the admin_user_create_cus A
- 9.8 Critical severity
TrueBooker – Appointment Booking and Scheduler…: Authorization Bypass Through User-Controlled Key
The TrueBooker plugin for WordPress is vulnerable to Account Takeover in all versions up to, and including, 1.2.6. This is due to the add_front_user_update() AJAX handler being registered for unauthenticated users and accepting an arbitrary truebooker_wp_user_
- 9.8 Critical severity
TrueBooker – Appointment Booking and Scheduler…: Missing Authorization
The TrueBooker – Appointment Booking and Scheduler System plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 1.2.3. This is due to the plugin not properly verifying that a user is authorized to perform an action. T
- 9.8 Critical severity
TrueBooker – Appointment Booking and Scheduler…: Weak Password Recovery Mechanism for Forgotten Password
The TrueBooker – Appointment Booking and Scheduler System plugin for WordPress is vulnerable to account takeover via improper password reset validation in all versions up to, and including, 1.2.3. This is due to the plugin not properly validating a user's iden
- 7.5 High severity
TrueBooker – Appointment Booking and Scheduler…: Improper Neutralization of Special Elements used in an SQL Command
The TrueBooker – Appointment Booking and Scheduler System plugin for WordPress is vulnerable to generic SQL Injection via the 'alldata[truebooker_user]' parameter in all versions up to, and including, 1.2.2 due to insufficient escaping on the user supplied par