Skip to content
Threat Feed
Subscribe

Product

TrueBooker – Appointment Booking and Scheduler System (<= 1.2.6)

1 brief RSS
critical advisory

Unauthenticated Account Takeover in TrueBooker WordPress Plugin

The TrueBooker plugin for WordPress up to version 1.2.6 is vulnerable to an unauthenticated account takeover via a flawed AJAX handler that allows attackers to modify user email addresses.

TrueBooker – Appointment Booking and Scheduler System
1r 2t 1c