EUVD-2026-48208
GHSA-qh8q-259v-qvrj
Severity by source
AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:L
Unauthenticated remote SQLi gives high confidentiality (full DB read) and limited integrity via injectable writes; scope kept Unchanged as impact stays within the site database.
Primary rating from Vendor (Patchstack).
CVSS VectorVendor: Patchstack
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:L
Lifecycle Timeline
2DescriptionCVE.org
Unauthenticated SQL Injection in TrueBooker <= 1.2.3 versions.
AnalysisAI
Unauthenticated SQL injection in the TrueBooker (truebooker-appointment-booking) WordPress plugin by themetechmount affects all versions up to and including 1.2.3, letting remote attackers inject arbitrary SQL through an exposed plugin parameter without any authentication. Rated CVSS 9.3, it enables extraction of sensitive WordPress database contents (user records, credentials, secrets) and, per the scope-changed CVSS vector, impact reaching beyond the plugin's own security boundary. …
Unlock full vulnerability intelligence
- Risk assessment & exploitation conditions
- Attack chain visualization
- Remediation with exact patch versions
- Threat intelligence from 22 sources
- Personal watchlist & email alerts
Free forever · No credit card required
Attack ChainAIDerived
Hypothetical attack flow derived from CVE metadata
Vulnerability AssessmentAI
| Exploitation | The concrete prerequisite is a WordPress site with the TrueBooker (truebooker-appointment-booking) plugin, version 1.2.3 or earlier, installed and active - the vulnerable booking endpoint must be reachable. … Additional conditions and limiting factors are described in the full assessment. |
| Risk Assessment | The Patchstack-assigned CVSS is 9.3 (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:L): network-reachable, low complexity, no privileges and no user interaction, meaning the technical barrier to exploitation is minimal. … Full risk analysis with EPSS, KEV, and SSVC signal comparison available after sign-in. |
| Exploit Scenario | An attacker discovers a WordPress site running TrueBooker (via plugin fingerprinting) and sends a crafted request to the vulnerable booking endpoint containing SQL metacharacters in an unsanitized parameter. Requiring no authentication or user interaction, they use boolean/time-based or UNION techniques to dump the wp_users table and password hashes, then crack or reuse them to escalate access. … |
| Remediation | No vendor-released patch version is identified in the available data, so treat 1.2.3 and earlier as unpatched and upgrade to any later fixed release listed on the Patchstack advisory (https://patchstack.com/database/wordpress/plugin/truebooker-appointment-booking/vulnerability/wordpress-truebooker-plugin-1-2-3-sql-injection-vulnerability?_s_id=cve) as soon as themetechmount publishes one. … Detailed patch versions, workarounds, and compensating controls in full report. |
Recommended ActionAI
Within 24 hours: disable the TrueBooker plugin on all WordPress installations running version 1.2.3 or earlier; audit all sites for plugin presence and document the exposure window. …
Sign in for detailed remediation steps and compensating controls.
Threat intelligence, references, and detailed analysis are available after sign-in.
More in Truebooker
View allAccount takeover in TrueBooker WordPress plugin before 1.2.4 enables unauthenticated attackers to reset any user’s passw
The TrueBooker WordPress plugin before 1.0.3 does not properly sanitise and escape a parameter before using it in a SQL
Privilege escalation in the TrueBooker (truebooker-appointment-booking) WordPress plugin through version 1.2.3 lets unau
Unauthenticated broken access control in the TrueBooker WordPress appointment-booking plugin (versions ≤ 1.1.9 by ThemeT
The TrueBooker WordPress plugin before 1.0.3 does not have CSRF check in place when updating its settings, which could a
TrueBooker appointment booking plugin through version 1.1.5 fails to enforce proper authorization controls, allowing una
Same weakness CWE-89 – SQL Injection
View allShare
External POC / Exploit Code
Leaving vuln.today