Beveiligingsadvies

CVE-2026-14545

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2026-07-28 06:00:01

Laatst bijgewerkt 2026-07-28 13:29:00

Toegewezen door WPScan

CVSS-score 9.8

Status PUBLISHED

Beschrijving

The TrueBooker WordPress plugin before 1.2.4 does not validate account ownership when resetting a user's password through one of its front-end account handlers, allowing unauthenticated attackers to set an arbitrary password on any account, including an administrator, and take over the site.

← Alle CVE's bekijken Bekijk op cve.org ↗