Skip to content
OpenAdvisories

Vendor

themetechmount

16 known vulnerabilities.

Products

TrueBooker 8 TrueBooker – Appointment Booking and Scheduler System 7 Boldman 1
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Critical 9.8
    CVE-2026-18315 Public exploit

    TrueBooker <= 1.2.6 - Unauthenticated Authorization Bypass Through User-Controlled Key to Account Takeover to 'truebooker_wp_user_id' Parameter

    The TrueBooker – Appointment Booking and Scheduler System plugin for WordPress is vulnerable to Authorization Bypass Through User-Controlled Key leading to Account Takeover in all versions up to, and including, 1.2.6. This is due to the admin_user_create_cus …

    themetechmount TrueBooker – Appointment Booking and Scheduler System Web / CMS