https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2025-47543.htmlhttps://patchthecve.com/cve/CVE-2025-47543.htmlWed, 17 Jun 2026 09:28:17 +0000MEDIUM 4.3: Cross-Site Request Forgery (CSRF) vulnerability in themetechmount TrueBooker truebooker-appointment-booking allows Cross Site Request Forgery.This issue affects TrueBooker: from n/a through <= 1.0.7.https://patchthecve.com/cve/CVE-2024-6925.htmlhttps://patchthecve.com/cve/CVE-2024-6925.htmlWed, 17 Jun 2026 08:18:59 +0000MEDIUM 4.3: The TrueBooker WordPress plugin before 1.0.3 does not have CSRF check in place when updating its settings, which could allow attackers to make a logged in admin change them via a CSRF attack.https://patchthecve.com/cve/CVE-2024-6924.htmlhttps://patchthecve.com/cve/CVE-2024-6924.htmlWed, 17 Jun 2026 08:18:59 +0000CRITICAL 9.8: The TrueBooker WordPress plugin before 1.0.3 does not properly sanitise and escape a parameter before using it in a SQL statement via an AJAX action available to unauthenticated users, leading to a SQL injection.