MEDIUMCVSS v3.1 5.3Vulnerability
CVE-2026-94231
The TrueBooker WordPress plugin before 1.3.0 does not have authorisation checks in place in some of its functionality, allowing unauthenticated users to create and modify booking services and categories, including their prices.
Properties
- Severity
- MEDIUM
- Nvd fetched at
- 2026-10-20T21:14:08.448323+00:00
- Epss score
- 0.00182
- Cvss score
- 5.3
- Cvss severity
- MEDIUM
- Retrieved at
- 2026-10-21T01:24:51+00:00
- Score
- 5.3
- Last source
- FIRST EPSS
- Cvss version
- 3.1
- Cve id
- CVE-2026-94231
- Cvss vector
- CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N
- First seen by Signal
- 2026-10-19T11:09:12+00:00
- Vector
- CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N
- Published at
- 2026-10-19T07:16:32.710
- Last modified
- 2026-10-19T21:02:51.987
- Epss percentile
- 0.07303
Related Entities (1)
HAS_WEAKNESS (1)
Explore deeper with Ninja Signal's threat intelligence graph