What is GHSA-47hm-j4wc-4fjq?

GHSA-47hm-j4wc-4fjq is a security advisory published by GitHub Security Advisories with Medium severity. The TrueBooker WordPress plugin before 1.2.7 does not have proper authorisation checks in one of...

Which CVE IDs does GHSA-47hm-j4wc-4fjq cover?

GHSA-47hm-j4wc-4fjq covers the following CVE IDs: CVE-2026-18779. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

What is the CVSS v3 score of GHSA-47hm-j4wc-4fjq?

GHSA-47hm-j4wc-4fjq has a CVSS v3 base score of 5.3, published by GitHub Security Advisories.

GHSA-47hm-j4wc-4fjqMediumCVSS 5.3

The TrueBooker WordPress plugin before 1.2.7 does not have proper authorisation checks in one of...

Vendor

GitHub Security Advisories

Published

August 19, 2026

Last Modified

August 19, 2026

🔗 CVE IDs covered (1)

CVE-2026-18779 →

📋 Description

The TrueBooker WordPress plugin before 1.2.7 does not have proper authorisation checks in one of its AJAX actions, allowing unauthenticated users to delete arbitrary appointment records along with their associated booking items and payment records.

🔗 References (3)

https://nvd.nist.gov/vuln/detail/CVE-2026-18779
https://wpscan.com/vulnerability/9d7f9a09-a144-4a0a-998c-e5bc5037fc1b
https://github.com/advisories/GHSA-47hm-j4wc-4fjq