CVE-2026-1797 in themetechmount Truebooker Plugin
摘要 (英语)
The Appointment Booking and Scheduler Plugin – Truebooker plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 1.1.4 through views php files. This makes it possible for unauthenticated attackers to view potentially sensitive information contained in the exposed views php files via direct access.
负责
Wordfence
预定
2026-02-03
披露
2026-03-31
条目
VulDB provides additional information and datapoints for this CVE:
| 标识符 | 漏洞 | CWE | 可利用 | 对策 | CVE |
|---|---|---|---|---|---|
| 354299 | themetechmount Truebooker Plugin 权限提升 | 862 | 未定义 | 官方修复 | CVE-2026-1797 |