CVE-2026-1797
Last modified
CVE-2026-1797 is a medium-severity vulnerability rated 5.3/10 on the CVSS scale. The Appointment Booking and Scheduler Plugin – Truebooker plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 1.1.4 through views php files. This makes it possible for unauthenticated attackers to view potentially sensitive information contained in the exposed views php files via direct access.. EPSS estimates a 0.21% chance of exploitation in the next 30 days.
Description
The Appointment Booking and Scheduler Plugin – Truebooker plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 1.1.4 through views php files. This makes it possible for unauthenticated attackers to view potentially sensitive information contained in the exposed views php files via direct access.
Metrics
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
Weakness Enumeration
References
Timeline
- Published
- Last Modified
- Status
- Deferred
Frequently Asked Questions
What is CVE-2026-1797?
How severe is CVE-2026-1797?
How do I fix CVE-2026-1797?
How Strix Helps
- Uncovering a hidden BOLA in Appsmith's snapshot logicStrix autonomously discovered a BOLA/IDOR vulnerability in Appsmith's snapshot deletion path.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2026
- CVE-2026-17964Incorrect security UI in UI in Google Chrome on Android prio…4.3
- CVE-2026-17965Incorrect security UI in Chrome for iOS in Google Chrome on …4.3
- CVE-2026-17966Inappropriate implementation in Views in Google Chrome on Ma…6.2
- CVE-2026-17967Use after free in Chrome for iOS in Google Chrome on iOS pri…8.8
- CVE-2026-17968Uninitialized Use in WebXR in Google Chrome on Android prior…6.5
- CVE-2026-17969Inappropriate implementation in Passwords in Google Chrome p…8.8
- CVE-2026-17970Insufficient validation of untrusted input in Passwords in G…4.3
- CVE-2026-17971Inappropriate implementation in Frame in Google Chrome prior…8.8
- CVE-2026-17972Inappropriate implementation in Chrome for iOS in Google Chr…4.3
- CVE-2026-17973Inappropriate implementation in Views in Google Chrome on Ma…5.5
- CVE-2026-17974Insufficient policy enforcement in DevTools in Google Chrome…6.5
- CVE-2026-17975Inappropriate implementation in IME in Google Chrome on Mac …6.5
Are you affected by CVE-2026-1797?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST