Truebooker
Vendor:
First CVE: Sep 8, 2024 · Active for 1 year
8
Total CVEs
More Total CVEs than 87% of tracked products
2.7
Avg CVEs / Year
Higher CVE frequency than 78% of tracked products
7.2
Avg CVSS
Higher Avg CVSS than 46% of tracked products
0.0%
KEV Rate
Bottom 1%
Trends Over Time
The number and severity of CVEs published that impact Truebooker over time
Volume of CVEsAvg CVSS Base Score
First CVE
Sep 8, 2024
22 months ago
Most Recent CVE
Jul 23, 2026
5 days ago
CVE Severity & Scoring
Truebooker8 CVEs
50%
50%
All CVEs353,173 CVEs
45%
40%
11%
MediumCritical
Attack Vector
Local0 (0.0%)
Network8 (100.0%)
Unknown0 (0.0%)
Physical0 (0.0%)
Adjacent Network0 (0.0%)
Attack Complexity
Low8 (100.0%)
High0 (0.0%)
Unknown0 (0.0%)
User Interaction
None6 (75.0%)
Unknown0 (0.0%)
Required2 (25.0%)
Privileges Required
Low0 (0.0%)
High0 (0.0%)
None8 (100.0%)
Unknown0 (0.0%)
Top CVEs
Signals from CVEs in this product scope (8 CVEs).
8 CVEs · Highest risk first
| CVE | Published | CVSS | Risk | KEV | Exploit |
|---|---|---|---|---|---|
CVE-2024-6924CRITICAL The TrueBooker WordPress plugin before 1.0.3 does not properly sanitise and escape a parameter before using it in a SQL statement via an AJAX action available to unauthenticated u | Sep 8, 2024 | 9.8 | 42 | NO | YES |
CVE-2026-61951CRITICAL Unauthenticated Privilege Escalation in TrueBooker <= 1.2.3 versions. | Jul 23, 2026 | 9.8 | 39 | NO | NO |
CVE-2026-61950CRITICAL Unauthenticated SQL Injection in TrueBooker <= 1.2.3 versions. | Jul 23, 2026 | 9.3 | 38 | NO | NO |
CVE-2026-48881CRITICAL Unauthenticated Broken Access Control in TrueBooker <= 1.1.9 versions. | Jun 15, 2026 | 9.1 | 30 | NO | NO |
CVE-2026-39663MEDIUM Missing Authorization vulnerability in themetechmount TrueBooker truebooker-appointment-booking allows Exploiting Incorrectly Configured Access Control Security Levels.This issue a | Apr 8, 2026 | 5.3 | 22 | NO | NO |
CVE-2025-67581MEDIUM Missing Authorization vulnerability in themetechmount TrueBooker truebooker-appointment-booking allows Exploiting Incorrectly Configured Access Control Security Levels.This issue a | Dec 9, 2025 | 5.3 | 20 | NO | NO |
CVE-2025-47543MEDIUM Cross-Site Request Forgery (CSRF) vulnerability in themetechmount TrueBooker truebooker-appointment-booking allows Cross Site Request Forgery.This issue affects TrueBooker: from n/ | May 7, 2025 | 4.3 | 15 | NO | NO |
CVE-2024-6925MEDIUM The TrueBooker WordPress plugin before 1.0.3 does not have CSRF check in place when updating its settings, which could allow attackers to make a logged in admin change them via a | Sep 8, 2024 | 4.3 | 15 | NO | NO |
Exploit Exposure
Signals from CVEs in this product scope (8 CVEs).
CISA KEV
0 CVEs
0.0% of CVEs· Bottom 1%
Metasploit
0 CVEs
0.0% of CVEs· Bottom 1%
Nuclei
1 CVE
12.5% of CVEs· 97th percentile
ExploitDB
0 CVEs
0.0% of CVEs· Bottom 1%
Social Chatter
Signals from CVEs in this product scope (8 CVEs).
Media Mentions
Signals from CVEs in this product scope (8 CVEs).
Top CNAs Publishing CVEs For Truebooker
Top CWEs
Versions
No cataloged versions.