Themetechmount Truebooker — known CVE vulnerabilities

Every CVE whose affected-product data names Themetechmount Truebooker, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (3)

• CVE-2024-6924 — CVSS 9.8 (critical): The TrueBooker WordPress plugin before 1.0.3 does not properly sanitise and escape a parameter before using it in a SQL statement via an…
• CVE-2024-6925 — CVSS 4.3 (medium): The TrueBooker WordPress plugin before 1.0.3 does not have CSRF check in place when updating its settings, which could allow attackers to…
• CVE-2025-47543 — CVSS 4.3 (medium): Cross-Site Request Forgery (CSRF) vulnerability in themetechmount TrueBooker truebooker-appointment-booking allows Cross Site Request…