CVE-2026-39798: WordPress TrueBooker plugin <= 1.2.9 - Settings Change vulnerability
Published Oct 6, 2026
·Updated
Unauthenticated Settings Change in TrueBooker <= 1.2.9 versions.
Affected Software
1 affected component
WordPress TrueBooker<=1.2.9
Event History
Oct 6, 2026
CVE Published
via MITRE·08:34 AM
Data Sourced
via MITRE·08:34 AM
DescriptionSeverityWeakness
Data Sourced
via NVD·09:17 AM
DescriptionSeverityWeakness
Frequently Asked Questions
1
Who can exploit this issue?
The vulnerability is unauthenticated, so an attacker does not need a WordPress account or prior access to the site. It affects TrueBooker versions up to and including 1.2.9.
2
What is the potential impact?
An attacker can change TrueBooker settings. The supplied severity vector indicates low integrity and availability impact, with no confidentiality impact listed.