CVE-2026-94231 — TrueBooker Appointment Booking 1.1.9 - 1.2.9 - Unauthenticated Service and Category Creation and Modification

CVE-2026-94231

TrueBooker Appointment Booking 1.1.9 - 1.2.9 - Unauthenticated Service and Category Creation and Modification PUBLISHED

Description (CNA)

The TrueBooker WordPress plugin before 1.3.0 does not have authorisation checks in place in some of its functionality, allowing unauthenticated users to create and modify booking services and categories, including their prices.

Affected (CNA)

Vendor / product	Versions
Unknown / TrueBooker	affected 1.1.9 before 1.3.0

CWE

No CWE identifiers supplied.

References

https://wpscan.com/vulnerability/d90ad3f4-4d58-43bc-8f17-0f6b8dfdde4f/

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.