https://db.gcve.eu/rss/recent/all/10 Most recent entries from all 2026-10-20T05:05:29.944201+00:00 Vulnerability-Lookup info@gcve.eu python-feedgen Contains only the most 10 recent entries. https://db.gcve.eu/vuln/cve-2026-94230 CVE-2026-94230 — TrueBooker Appointment Booking 1.1.9 - 1.2.9 - Unauthenticated Booking Creation with Arbitrary Price via Multiple AJAX… 2026-10-20T05:05:29.945188+00:00

Affected: Unknown TrueBooker

The TrueBooker WordPress plugin before 1.3.0 does not have authorisation checks in some of its AJAX actions, and does not validate the submitted service price server-side, allowing unauthenticated users to create bookings at a price of their choosing and to attach them to arbitrary customer accounts.