Medium
CVE-2026-39798
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 21
Reset filters
Critical
CVE-2026-14349
TrueBooker <= 1.2.3 - Missing Authorization to Unauthenticated Arbitrary User Email Modification via 'admin_addcustomer' AJAX Action
Medium
CVE-2026-18779
TrueBooker – Appointment Booking and Scheduler System < 1.2.7 - Missing Authorization
Medium
CVE-2026-18778
TrueBooker – Appointment Booking and Scheduler System < 1.2.7 - Unauthenticated Information Exposure
High
CVE-2026-18776
TrueBooker – Appointment Booking and Scheduler System < 1.2.7 - Unauthenticated Privilege Escalation
Medium
CVE-2026-18777
TrueBooker – Appointment Booking and Scheduler System < 1.2.7 - Missing Authorization
High
CVE-2026-73347
TrueBooker – Appointment Booking and Scheduler System <= 1.2.6 - Unauthenticated Privilege Escalation
Critical
CVE-2026-18315
TrueBooker <= 1.2.6 - Unauthenticated Authorization Bypass Through User-Controlled Key to Account Takeover to 'truebooker_wp_user_id' Parameter
Critical
CVE-2026-16142
TrueBooker <= 1.2.6 - Unauthenticated Account Takeover via Insecure Direct Object Reference in 'truebooker_wp_user_id' Parameter
Critical
CVE-2026-14364
TrueBooker <= 1.2.3 - Missing Authorization to Unauthenticated Arbitrary Password Reset via 'tbab-userid'
Critical
CVE-2026-14365
TrueBooker <= 1.2.3 - Missing Authorization to Unauthenticated Arbitrary Password Reset via 'truebooker_wp_user_id'
High
CVE-2026-13161
TrueBooker <= 1.2.2 - Unauthenticated SQL Injection
Critical
CVE-2026-61951
TrueBooker – Appointment Booking and Scheduler System <= 1.2.3 - Unauthenticated Privilege Escalation
High
CVE-2026-61950
TrueBooker – Appointment Booking and Scheduler System <= 1.2.3 - Unauthenticated SQL Injection
Medium
CVE-2026-48881
TrueBooker – Appointment Booking and Scheduler System <= 1.1.9 - Missing Authorization
Medium
CVE-2026-1797
Truebooker - Appointment Booking and Scheduler Plugin <= 1.1.4 - Sensitive Information Exposure via Views Files
Medium
CVE-2026-39663
TrueBooker <= 1.1.6 - Missing Authorization
Medium
CVE-2025-67581
TrueBooker <= 1.1.0 - Missing Authorization
Medium
CVE-2025-47543
TrueBooker <= 1.0.7 - Cross-Site Request Forgery
Medium
CVE-2024-6925
TrueBooker <= 1.0.2 - Cross-Site Request Forgery to Settings Update
Critical
CVE-2024-6924
TrueBooker <= 1.0.3 - Unauthenticated SQL Injection
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.