What is GHSA-8fxq-m46w-rjrf?

GHSA-8fxq-m46w-rjrf is a security advisory published by GitHub Security Advisories with Medium severity. The TrueBooker WordPress plugin before 1.2.7 does not have proper authorisation checks in one of...

Which CVE IDs does GHSA-8fxq-m46w-rjrf cover?

GHSA-8fxq-m46w-rjrf covers the following CVE IDs: CVE-2026-18777. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

What is the CVSS v3 score of GHSA-8fxq-m46w-rjrf?

GHSA-8fxq-m46w-rjrf has a CVSS v3 base score of 5.3, published by GitHub Security Advisories.

GHSA-8fxq-m46w-rjrfMediumCVSS 5.3

The TrueBooker WordPress plugin before 1.2.7 does not have proper authorisation checks in one of...

Vendor

GitHub Security Advisories

Published

August 19, 2026

Last Modified

August 19, 2026

🔗 CVE IDs covered (1)

CVE-2026-18777 →

📋 Description

The TrueBooker WordPress plugin before 1.2.7 does not have proper authorisation checks in one of its AJAX actions, allowing unauthenticated users to change the status of arbitrary appointments, as well as to trigger notification emails to the affected customers.

🔗 References (3)

https://nvd.nist.gov/vuln/detail/CVE-2026-18777
https://wpscan.com/vulnerability/05a09ba7-b781-4462-8c50-3a45f2757cb2
https://github.com/advisories/GHSA-8fxq-m46w-rjrf