WordPress TrueBooker Plugin Authorization Bypass

The TrueBooker plugin for WordPress is affected by an authorization bypass vulnerability.

TrueBooker versions up to 1.2.3 do not properly verify user authorization, allowing unauthenticated attackers to modify email addresses of user accounts, including administrators.

This can be exploited to reset passwords and gain unauthorized access to accounts.