CVE-2026-73347: WordPress TrueBooker plugin <= 1.2.6 - Privilege Escalation vulnerability
Published Aug 19, 2026
·Updated
Unauthenticated Privilege Escalation in TrueBooker <= 1.2.6 versions.
Affected Software
1 affected component
WordPress TrueBooker plugin<=1.2.6
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
WordPress TrueBooker pluginto a version that resolves this vulnerability.Fixed in 1.2.7
Event History
Aug 19, 2026
CVE Published
via MITRE·12:38 PM
Data Sourced
via MITRE·12:38 PM
RemedyDescriptionSeverityWeakness
Frequently Asked Questions
1
Who can exploit this issue?
The issue is described as unauthenticated, so an attacker does not need a WordPress account or existing plugin privileges to exploit it.
2
Which deployments are affected?
TrueBooker plugin versions 1.2.6 and earlier are identified as affected. The available information does not state whether any particular plugin configuration is required.
3
What impact could successful exploitation have?
Successful exploitation can result in privilege escalation. The supplied severity vector indicates potential high impact to confidentiality, integrity, and availability.