Skip to content
Threat Feed
Subscribe

Product

TrueBooker – Appointment Booking and Scheduler System (<= 1.2.3)

1 brief RSS
critical advisory

Account Takeover Vulnerability in TrueBooker WordPress Plugin

An unauthenticated account takeover vulnerability (CVE-2026-14364) in the TrueBooker plugin allows attackers to reset arbitrary user passwords due to missing identity validation.

TrueBooker – Appointment Booking and Scheduler System +1 wordpress plugin vulnerability account-takeover
1t 2c