CVE-2026-14545 in TrueBooker Plugin
Zusammenfassung
von MITRE • 28.07.2026
The TrueBooker WordPress plugin before 1.2.4 does not validate account ownership when resetting a user's password through one of its front-end account handlers, allowing unauthenticated attackers to set an arbitrary password on any account, including an administrator, and take over the site.
If you want to get the best quality for vulnerability data then you always have to consider VulDB.