EUVD-2026-62381
GHSA-rj26-wv7g-62x2
Severity by source
AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Unauthenticated network-reachable privilege escalation with no user interaction gives AV:N/AC:L/PR:N/UI:N, and gaining admin-level rights yields full C/I/A impact.
Primary rating from Vendor (Patchstack).
CVSS VectorVendor: Patchstack
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Lifecycle Timeline
2DescriptionCVE.org
Unauthenticated Privilege Escalation in TrueBooker <= 1.2.6 versions.
AnalysisAI
Unauthenticated privilege escalation in the TrueBooker (truebooker-appointment-booking) WordPress plugin versions 1.2.6 and earlier allows a remote attacker with no credentials to elevate their privileges within the WordPress site, per a Patchstack report. The CVSS 9.8 rating (AV:N/AC:L/PR:N/UI:N) reflects fully remote, low-complexity abuse with high confidentiality, integrity, and availability impact. …
Unlock full vulnerability intelligence
- Risk assessment & exploitation conditions
- Attack chain visualization
- Remediation with exact patch versions
- Threat intelligence from 22 sources
- Personal watchlist & email alerts
Free forever · No credit card required
Attack ChainAIDerived
Hypothetical attack flow derived from CVE metadata
Vulnerability AssessmentAI
| Exploitation | The only confirmed prerequisite is network access to a WordPress site running the TrueBooker (truebooker-appointment-booking) plugin at version 1.2.6 or earlier with the vulnerable component reachable. … Additional conditions and limiting factors are described in the full assessment. |
| Risk Assessment | All CVSS signals point to a high-priority issue: network attack vector, low complexity, no privileges, and no user interaction, with full CIA impact (9.8). … Full risk analysis with EPSS, KEV, and SSVC signal comparison available after sign-in. |
| Exploit Scenario | An unauthenticated attacker sends a crafted HTTP request to a vulnerable plugin endpoint on a public WordPress site running TrueBooker 1.2.6 or earlier and obtains elevated privileges - for example, creating or promoting an account to an administrative role. Given AV:N/AC:L/PR:N/UI:N, this requires only network reachability and no user interaction, making it suitable for automated, opportunistic scanning, though no public exploit code has been identified yet. |
| Remediation | No specific vendor-released fix version was provided in the available data, so no patched version can be cited with confidence; consult the Patchstack advisory (https://patchstack.com/database/wordpress/plugin/truebooker-appointment-booking/vulnerability/wordpress-truebooker-plugin-1-2-6-privilege-escalation-vulnerability) and the WordPress plugin repository for the earliest release above 1.2.6 and upgrade to it once confirmed. … Detailed patch versions, workarounds, and compensating controls in full report. |
Recommended ActionAI
Within 24 hours, conduct an inventory of all WordPress installations to identify TrueBooker plugin versions 1.2.6 and earlier and immediately disable the plugin if not actively used in critical workflows. …
Sign in for detailed remediation steps and compensating controls.
Threat intelligence, references, and detailed analysis are available after sign-in.
More in Truebooker
View allAccount takeover in TrueBooker WordPress plugin before 1.2.4 enables unauthenticated attackers to reset any user’s passw
The TrueBooker WordPress plugin before 1.0.3 does not properly sanitise and escape a parameter before using it in a SQL
Privilege escalation in the TrueBooker (truebooker-appointment-booking) WordPress plugin through version 1.2.3 lets unau
Unauthenticated SQL injection in the TrueBooker (truebooker-appointment-booking) WordPress plugin by themetechmount affe
Unauthenticated broken access control in the TrueBooker WordPress appointment-booking plugin (versions ≤ 1.1.9 by ThemeT
The TrueBooker WordPress plugin before 1.0.3 does not have CSRF check in place when updating its settings, which could a
TrueBooker appointment booking plugin through version 1.1.5 fails to enforce proper authorization controls, allowing una
Same weakness CWE-266 – Incorrect Privilege Assignment
View allSame technique Privilege Escalation
View allShare
External POC / Exploit Code
Leaving vuln.today