Log in Start free

ThemetechMount

Products

ProductCVEsExploitedLatest
TrueBooker8–Oct 6, 2026
TrueBooker – Appointment Booking and Scheduler System7–Sep 16, 2026
Boldman1–Mar 13, 2026

Exploited and recent CVEs

  • CVE-2026-39798 Medium 6.5 WordPress TrueBooker plugin <= 1.2.9 - Settings Change vulnerability 0.2%
  • CVE-2026-14349 Critical 9.8 TrueBooker <= 1.2.3 - Missing Authorization to Unauthenticated Arbitrary User Email Modification via 'admin_addcustomer' AJAX Action 0.6%
  • CVE-2026-18315 Critical 9.8 TrueBooker <= 1.2.6 - Unauthenticated Authorization Bypass Through User-Controlled Key to Account Takeover to 'truebooker_wp_user_id' Parameter 3.0%
  • CVE-2026-73347 Critical 9.8 WordPress TrueBooker plugin <= 1.2.6 - Privilege Escalation vulnerability 0.5%
  • CVE-2026-16142 Critical 9.8 TrueBooker <= 1.2.6 - Unauthenticated Account Takeover via Insecure Direct Object Reference in 'truebooker_wp_user_id' Parameter 0.7%
  • CVE-2026-14364 Critical 9.8 TrueBooker <= 1.2.3 - Missing Authorization to Unauthenticated Arbitrary Password Reset via 'tbab-userid' 0.5%
  • CVE-2026-14365 Critical 9.8 TrueBooker <= 1.2.3 - Missing Authorization to Unauthenticated Arbitrary Password Reset via 'truebooker_wp_user_id' 0.6%
  • CVE-2026-13161 High 7.5 TrueBooker <= 1.2.2 - Unauthenticated SQL Injection 0.8%
  • CVE-2026-61951 Critical 9.8 WordPress TrueBooker plugin <= 1.2.3 - Privilege Escalation vulnerability 0.5%
  • CVE-2026-61950 Critical 9.3 WordPress TrueBooker plugin <= 1.2.3 - SQL Injection vulnerability 0.4%
  • CVE-2026-48881 Critical 9.1 WordPress TrueBooker plugin <= 1.1.9 - Broken Access Control vulnerability 0.3%
  • CVE-2026-39663 Medium 5.3 WordPress TrueBooker plugin <= 1.1.5 - Broken Access Control vulnerability 0.2%
  • CVE-2026-1797 Medium 5.3 Truebooker - Appointment Booking and Scheduler Plugin <= 1.1.4 - Sensitive Information Exposure via Views Files 0.2%
  • CVE-2026-32400 High 7.5 WordPress Boldman theme <= 7.7 - Local File Inclusion vulnerability 0.4%
  • CVE-2025-67581 Medium 5.3 WordPress TrueBooker plugin <= 1.1.0 - Broken Access Control vulnerability 0.2%
  • CVE-2025-47543 Medium 4.3 WordPress TrueBooker plugin <= 1.0.7 - Cross Site Request Forgery (CSRF) Vulnerability 0.2%