Skip to content
Threat Feed
Subscribe

CPE

Cpe:2.3:a:truebooker_project:truebooker:*:*:*:*:*:wordpress:*:*

1 brief RSS
critical advisory

Authorization Bypass in TrueBooker WordPress Plugin

The TrueBooker Appointment Booking and Scheduler System plugin for WordPress contains an authorization bypass vulnerability allowing unauthenticated attackers to modify arbitrary user email addresses and facilitate account takeover.

TrueBooker – Appointment Booking and Scheduler System wordpress vulnerability authorization-bypass
2t 1c