Critical · 9.8 CVE-2026-61951 EUVD-2026-48209GHSA-jwj9-c7w4-qmpm

WordPress TrueBooker plugin <= 1.2.3 - Privilege Escalation vulnerability

Published Jul 23, 2026 · Updated Jul 23, 2026 · Assigned by Patchstack

Vendor: themetechmount Product: TrueBooker

Description

Unauthenticated Privilege Escalation in TrueBooker <= 1.2.3 versions.

Affected products

Vendor	Product	Affected	Fixed
themetechmount	TrueBooker	≤ 1.2.3	—

References

https://patchstack.com/database/wordpress/plugin/truebooker-appointment-booking/vulnerability/wordpress-truebooker-plugin-1-2-3-privilege-escalation-vulnerability?_s_id=cve vdb-entry