Skip to content
CVE PROGRAM SOURCE RECORD5.3 Medium

CVE-2026-94231

TrueBooker Appointment Booking 1.1.9 - 1.2.9 - Unauthenticated Service and Category Creation and Modification

Description

The TrueBooker WordPress plugin before 1.3.0 does not have authorisation checks in place in some of its functionality, allowing unauthenticated users to create and modify booking services and categories, including their prices.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Unknown TrueBooker

Default version status: unaffected

  • 1.1.9 to < 1.3.0affected

References