CRITICALVulnerability
Verified
Global

NVD CRITICAL: CVE-2026-14365 — The TrueBooker – Appointment Booking and Scheduler System plugin for WordPress i...

·Source: NIST NVD

Updated:

Executive Summary

The TrueBooker – Appointment Booking and Scheduler System plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 1.2.3. This is due to the plugin not properly verifying that a user is authorized to perform an action. This makes it possible for unauthenticated attackers to change the password of arbitrary user accounts, including administrators, which can b

Analysis

The TrueBooker – Appointment Booking and Scheduler System plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 1.2.3. This is due to the plugin not properly verifying that a user is authorized to perform an action. This makes it possible for unauthenticated attackers to change the password of arbitrary user accounts, including administrators, which can be leveraged to gain access to those accounts. CVSS Score: 9.8. Published: 2026-08-07T05:16:57.883.

Indicators of Compromise (1)

CVE (1)
CVE-2026-14365
NVDMITRE CVE
Source Attribution

Originally published by NIST NVD on Aug 7, 2026. Verified by: NIST.

Related Threats

MEDIUMVulnerability

FDIC aims to establish standards body to certify banking services providers - Bloomberg Law

The Federal Deposit Insurance Corp. (FDIC) is working with industry leaders to establish an independent standards committee to certify banks' fintech partners.

Finextra
MEDIUMVulnerability

Time for GPS Spoofing-Resistant Quantum Clocks, Says DARPA

<img src="https://ismg-cdn.nyc3.cdn.digitaloceanspaces.com/articles/its-about-time-for-gps-spoofing-resistant-quantum-clocks-darpa-says-image_small-9-a-32452.jpg" align=right hspace=4><b>Optical Clocks Could Maintain Precise Timing When GPS Signals Are Disrupted</b><br>DARPA selected IonQ to create a manufacturing pipeline for rugged optical atomic clocks that could preserve precise military timin

Bank Info Security
MEDIUMVulnerability

Healthcare and Victim Support Charities Affected by Beacon Cyber Incident

Beacon has informed around 1500 customer charities that its CRM databases were accessed and likely exfiltrated by an unauthorized actor

Infosecurity Magazine