CVE-2026-94231 — TrueBooker Appointment Booking 1.1.9 - 1.2.9 - Unauthenticated Service and Category Creation and Modification
The TrueBooker WordPress plugin before 1.3.0 does not have authorisation checks in place in some of its functionality, allowing unauthenticated users to create and modify bookin…
Published: 2026-10-19 · CVSS: 5.3 · CVSS 3.1
The TrueBooker WordPress plugin before 1.3.0 does not have authorisation checks in place in some of its functionality, allowing unauthenticated users to create and modify booking services and categories, including their prices.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7