Critical · 9.3 CVE-2026-61950 EUVD-2026-48208GHSA-qh8q-259v-qvrj

WordPress TrueBooker plugin <= 1.2.3 - SQL Injection vulnerability

Published Jul 23, 2026 · Updated Jul 23, 2026 · Assigned by Patchstack

Vendor: themetechmount Product: TrueBooker

Description

Unauthenticated SQL Injection in TrueBooker <= 1.2.3 versions.

Affected products

Vendor	Product	Affected	Fixed
themetechmount	TrueBooker	≤ 1.2.3	—

References

https://patchstack.com/database/wordpress/plugin/truebooker-appointment-booking/vulnerability/wordpress-truebooker-plugin-1-2-3-sql-injection-vulnerability?_s_id=cve vdb-entry