Unknown TrueBooker

• CVE-2026-94231 Medium 5.3 TrueBooker Appointment Booking 1.1.9 - 1.2.9 - Unauthenticated Service and Category Creation and Modification 0.2%
• CVE-2026-94230 Medium 5.3 TrueBooker Appointment Booking 1.1.9 - 1.2.9 - Unauthenticated Booking Creation with Arbitrary Price via Multiple AJAX Actions 0.2%
• CVE-2026-94229 Medium 5.3 TrueBooker Appointment Booking 1.1.9 - 1.2.9 - Unauthenticated Customer PII Disclosure via IDOR in 'refappbkd' Parameter 0.2%
• CVE-2026-94228 Medium 5.3 TrueBooker Appointment Booking 1.1.9 - 1.2.9 - Unauthenticated Plugin Settings Overwrite via admin_setting_setup_data 0.2%
• CVE-2026-18779 Medium 5.3 TrueBooker Appointment Booking < 1.2.7 - Unauthenticated Appointment and Payment Record Deletion via update_appointment_booked 0.3%
• CVE-2026-18778 Medium 5.3 TrueBooker Appointment Booking < 1.2.7 - Unauthenticated Customer PII Disclosure via Multiple AJAX Actions 0.3%
• CVE-2026-18777 Medium 5.3 TrueBooker Appointment Booking < 1.2.7 - Unauthenticated Arbitrary Appointment Status Change via update_appointment_status 0.3%
• CVE-2026-18776 Critical 9.8 TrueBooker Appointment Booking < 1.2.7 - Unauthenticated Account Takeover via Multiple AJAX Actions 0.5%
• CVE-2026-14545 Critical 9.8 TrueBooker Appointment Booking < 1.2.4 - Unauthenticated Account Takeover via Password Reset 0.5%
• CVE-2024-6925 Medium 4.3 TrueBooker < 1.0.3 - Settings Update via CSRF 0.2%
• CVE-2024-6924 Critical 9.8 TrueBooker < 1.0.3 - Multiple Unauthenticated SQLi 3.3%