An unauthenticated authorization bypass vulnerability in the TrueBooker plugin for WordPress poses a critical risk of full administrative account takeover.

The plugin fails to perform adequate capability checks, allowing unauthenticated attackers to invoke functions that modify user account email addresses. This lack of authorization control allows an attacker to change the email address of any user, including administrators, to facilitate a password reset and gain unauthorized access.

This vulnerability carries a CVSS score of 9.8, reflecting its critical severity due to the ease of exploitation and the potential for total system compromise. Successful exploitation grants attackers administrative control over the WordPress site, which may lead to the exfiltration of sensitive appointment data, unauthorized modification of site content, and potential distribution of malicious code to site visitors.

Immediate Action: Cease use of the plugin immediately or restrict access to the affected site components until a version greater than 1.2.3 is confirmed and installed.

Proactive Monitoring: Review web server and WordPress access logs for unusual requests directed at the plugin's AJAX endpoints, specifically focusing on account management or user profile modification patterns.

Compensating Controls: Deploy a Web Application Firewall (WAF) with custom rules designed to block unauthorized requests to the plugin's vulnerable AJAX functions until an official patch is verified.

Public Exploit Available: exploit_available (unknown)

Given the critical nature of this authorization bypass, administrators must prioritize the protection of the TrueBooker plugin. If an update beyond version 1.2.3 is not yet available through official vendor channels, the plugin should be disabled to prevent account takeover attacks. Immediate action is required to maintain the integrity of user accounts and the overall security posture of the WordPress installation.