[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"repo-stars":3,"vuln-CVE-2026-14349":6},{"stargazers_count":4,"fetched_at":5},8,"2026-09-17T09:18:03.903Z",{"id":7,"descriptions":8,"cisa":9,"weaknesses":10,"exploits":229,"aliases":230,"duplicate_of":9,"upstream":231,"downstream":232,"duplicates":233,"related":234,"reserved_at":9,"published_at":235,"modified_at":236,"state":237,"summary":238,"references_raw":247,"kevs":257,"epss":258,"epss_history":261,"metrics":263,"affected":270},"CVE-2026-14349","The TrueBooker – Appointment Booking and Scheduler System plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 1.2.3. This is due to the plugin not properly verifying that a user is authorized to perform an action. This makes it possible for unauthenticated attackers to modify the email address of arbitrary user accounts, including administrators, which can be leveraged to reset the account's password and gain access to it.",null,[11],{"_key":12,"id":12,"name":13,"description":14,"type":15,"status":16,"abstraction":17,"likelihood_of_exploit":18,"capec":19},"CWE-862","Missing Authorization","The product does not perform an authorization check when an actor attempts to access a resource or perform an action.","weakness","Incomplete","Class","High",[20],{"id":21,"name":22,"techniques":23},"CAPEC-665","Exploitation of Thunderbolt Protection Flaws",[24,61,101],{"id":25,"name":26,"tactics":27,"countermeasures":34},"T1211","Exploitation for Stealth",[28,31],{"id":29,"name":30},"TA0030","Defense Evasion",{"id":32,"name":33},"TA0005","Stealth",[35,40,45,49,53,57],{"id":36,"name":37,"tactic":38},"D3-PSEP","Process Segment Execution Prevention",{"name":39},"Harden",{"id":41,"name":42,"tactic":43},"D3-MBT","Memory Boundary Tracking",{"name":44},"Detect",{"id":46,"name":47,"tactic":48},"D3-PCSV","Process Code Segment Verification",{"name":44},{"id":50,"name":51,"tactic":52},"D3-SFCV","Stack Frame Canary Validation",{"name":39},{"id":54,"name":55,"tactic":56},"D3-SSC","Shadow Stack Comparisons",{"name":44},{"id":58,"name":59,"tactic":60},"D3-SAOR","Segment Address Offset Randomization",{"name":39},{"id":62,"name":63,"tactics":64,"countermeasures":70},"T1542.002","Component Firmware",[65,66,67],{"id":29,"name":30},{"id":32,"name":33},{"id":68,"name":69},"TA0110","Persistence",[71,75,79,83,87,92,97],{"id":72,"name":73,"tactic":74},"D3-FEMC","Firmware Embedded Monitoring Code",{"name":44},{"id":76,"name":77,"tactic":78},"D3-FV","Firmware Verification",{"name":44},{"id":80,"name":81,"tactic":82},"D3-FBA","Firmware Behavior Analysis",{"name":44},{"id":84,"name":85,"tactic":86},"D3-SU","Software Update",{"name":39},{"id":88,"name":89,"tactic":90},"D3-SWI","Software Inventory",{"name":91},"Model",{"id":93,"name":94,"tactic":95},"D3-RS","Restore Software",{"name":96},"Restore",{"id":98,"name":99,"tactic":100},"D3-AVE","Asset Vulnerability Enumeration",{"name":91},{"id":102,"name":103,"tactics":104,"countermeasures":113},"T1556","Modify Authentication Process",[105,106,109,110],{"id":29,"name":30},{"id":107,"name":108},"TA0112","Defense Impairment",{"id":68,"name":69},{"id":111,"name":112},"TA0031","Credential Access",[114,119,123,128,132,136,140,144,148,152,156,160,164,168,173,177,181,185,189,193,197,201,205,209,213,217,221,225],{"id":115,"name":116,"tactic":117},"D3-LFP","Local File Permissions",{"name":118},"Isolate",{"id":120,"name":121,"tactic":122},"D3-HBPI","Hardware-based Process Isolation",{"name":118},{"id":124,"name":125,"tactic":126},"D3-FEV","File Eviction",{"name":127},"Evict",{"id":129,"name":130,"tactic":131},"D3-HS","Host Shutdown",{"name":127},{"id":133,"name":134,"tactic":135},"D3-PSMD","Process Self-Modification Detection",{"name":44},{"id":137,"name":138,"tactic":139},"D3-CQ","Content Quarantine",{"name":118},{"id":141,"name":142,"tactic":143},"D3-ABPI","Application-based Process Isolation",{"name":118},{"id":145,"name":146,"tactic":147},"D3-SFA","System File Analysis",{"name":44},{"id":149,"name":150,"tactic":151},"D3-PT","Process Termination",{"name":127},{"id":153,"name":154,"tactic":155},"D3-SCF","System Call Filtering",{"name":118},{"id":157,"name":158,"tactic":159},"D3-AM","Access Modeling",{"name":91},{"id":161,"name":162,"tactic":163},"D3-RC","Restore Configuration",{"name":96},{"id":165,"name":166,"tactic":167},"D3-FE","File Encryption",{"name":39},{"id":169,"name":170,"tactic":171},"D3-DF","Decoy File",{"name":172},"Deceive",{"id":174,"name":175,"tactic":176},"D3-FIM","File Integrity Monitoring",{"name":44},{"id":178,"name":179,"tactic":180},"D3-CF","Content Filtering",{"name":118},{"id":182,"name":183,"tactic":184},"D3-FA","File Analysis",{"name":44},{"id":186,"name":187,"tactic":188},"D3-WSAM","Web Session Access Mediation",{"name":118},{"id":190,"name":191,"tactic":192},"D3-CI","Configuration Inventory",{"name":91},{"id":194,"name":195,"tactic":196},"D3-RF","Restore File",{"name":96},{"id":198,"name":199,"tactic":200},"D3-PSA","Process Spawn Analysis",{"name":44},{"id":202,"name":203,"tactic":204},"D3-PLA","Process Lineage Analysis",{"name":44},{"id":206,"name":207,"tactic":208},"D3-RFAM","Remote File Access Mediation",{"name":118},{"id":210,"name":211,"tactic":212},"D3-CM","Content Modification",{"name":118},{"id":214,"name":215,"tactic":216},"D3-NTPM","Network Traffic Policy Mapping",{"name":91},{"id":218,"name":219,"tactic":220},"D3-KBPI","Kernel-based Process Isolation",{"name":118},{"id":222,"name":223,"tactic":224},"D3-PS","Process Suspension",{"name":127},{"id":226,"name":227,"tactic":228},"D3-HR","Host Reboot",{"name":127},[],[],[],[],[],[],"2026-09-16T03:28:17.683Z","2026-09-16T18:57:03.584Z","Deferred",{"cisa_kev":239,"cisa_ransomware":239,"cisa_vendor":9,"epss_severity":240,"epss_score":241,"severity":242,"severity_score":243,"severity_version":244,"severity_source":245,"severity_vector":246,"severity_status":237},false,"low",0.00424,"critical",9.8,"v3.1","cve.org","CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",[248,253],{"url":249,"sources":250,"tags":252},"https://www.wordfence.com/threat-intel/vulnerabilities/id/3a61ddbc-9118-4cad-a639-7822606a3181?source=cve",[245,251],"nvd",[],{"url":254,"sources":255,"tags":256},"https://plugins.trac.wordpress.org/changeset?old_path=/truebooker-appointment-booking/tags/1.2.3/main/function_ajax.php&new_path=/truebooker-appointment-booking/tags/1.2.4/main/function_ajax.php",[245,251],[],[],{"date":259,"score":241,"percentile":260},"2026-09-16",0.36071,[262],{"date":259,"score":241,"percentile":260},[264,268],{"source":245,"cvss_v2_0":9,"cvss_v3_0":9,"cvss_v3_1":265,"cvss_v4_0":9},{"baseScore":243,"baseSeverity":266,"vectorString":246,"impactScore":243,"exploitabilityScore":267},"CRITICAL",10,{"source":251,"cvss_v2_0":9,"cvss_v3_0":9,"cvss_v3_1":269,"cvss_v4_0":9},{"baseScore":243,"baseSeverity":266,"vectorString":246,"impactScore":243,"exploitabilityScore":267},[271],{"ecosystem":9,"name":272,"vendor":273,"product":274,"cpe_part":275,"purl_type":9,"purl_namespace":9,"purl_name":9,"source":9,"versions":276},"TrueBooker – Appointment Booking and Scheduler System","themetechmount","truebooker – appointment booking and scheduler system","a",[277],{"version":278,"is_range":279,"range_type":245,"version_start":9,"version_start_type":9,"version_end":280,"version_end_type":281,"fixed_in":9},"\u003C= 1.2.3",true,"1.2.3","including"]