Truebooker Appointment Booking and Scheduler Plugin Sensitive Information Exposure Vulnerability

A vulnerability allowing sensitive information exposure has been identified in the Truebooker Appointment Booking and Scheduler Plugin for WordPress, affecting all versions through 1.1.4. The issue arises from views PHP files that can be accessed directly, enabling unauthenticated attackers to retrieve potentially sensitive information.

Impact

Exploitation of this vulnerability could lead to unauthorized access to sensitive information contained in the affected views PHP files.

Remediation

Users are advised to update the Truebooker Appointment Booking and Scheduler Plugin to version 1.1.5 or a newer patched version.