Input validation vulnerability in TrueBooker – Appointment Booking and Scheduler Plugin. 1.0.7

The TrueBooker add-on for WordPress has a security weakness in versions 1.0.7 and below. This is because it does not properly check for a specific code, called a nonce, on certain functions like truebooker_service_cat_remove_data(). This means that someone without authorization could potentially delete or change information if they can trick the person in charge of the website into clicking on a link.