Skip to content
PluginCanary

TrueBooker

TrueBooker - Appointment Booking and Scheduler System
by ThemetechMount · 600+ active installs · Checked 3 Nov 2026
Healthy

Healthy: maintained, last release 29 Oct 2026, 29 releases in 24 months, no unpatched vulnerabilities.

81/ 100 Canary Score
Sub-scores for TrueBooker
Ownership100
Maintenance100
Security60
Support70
Reputation70

How the score works

Quick answers

Is TrueBooker still maintained?
Yes. Last release 29 Oct 2026, 29 releases in the last 24 months. 29 Oct 2026 · wordpress.org
Who owns TrueBooker, and has it changed hands?
No change recorded. Main committer themetechmount since Mar 2024. 3 Nov 2026 · SVN log
Was TrueBooker removed from wordpress.org?
No. Listed on wordpress.org as of 3 Nov 2026. 3 Nov 2026 · wordpress.org
Is TrueBooker safe?
25 known vulnerabilities, all fixed (latest in 1.3.0). Not on the exploited list. 16 Oct 2026 · Wordfence Intelligence
Is the latest TrueBooker update safe to install?
No ownership change before 1.3.1. No one-star spike after it. 29 Oct 2026 · Release history

Active signals

Facts we detected, with links to the source.

No open risk signals. Signals appear here when we detect an ownership change, closure, vulnerability or decline.

Ownership timeline

Who commits to the plugin's code on wordpress.org, over time.

Committers and their active periods
plugin-master16 Mar 2024 to 16 Mar 2024, 1 commits
themetechmount18 Mar 2024 to 29 Oct 2026, 193 commits

2 committers recorded. No ownership change since 2024.

Maintenance

Last release
6 days ago
Releases, 24 months
29
Tested up to
7.1 current
Requires PHP
7.4 supported 8.2+
Releases per quarter
Releases per quarter for TrueBooker
Q1 20241
Q2 20240
Q3 20244
Q4 20240
Q1 20252
Q2 20255
Q3 20250
Q4 20250
Q1 20266
Q2 20268
Q3 20266
Q4 20262

Last release 29 Oct 2026. Tested with WordPress 7.1 (current).

Reputation

Last 90 days: no reviews. Lifetime: 5.0.

Rating distribution
5 star15
4 star0
3 star0
2 star0
1 star0

Security record

23 vulnerabilities in 24 months (25 on record), all patched (latest fixed in 1.3.0).

Show 25 patched vulnerabilities
PublishedIssueCVSSAffectedFixed inDays to patch
16 Oct 2026TrueBooker Appointment Booking 1.1.9 - 1.2.9 - Unauthenticated Information Exposure5.31.1.9 to 1.2.91.3.0n/a
16 Oct 2026TrueBooker Appointment Booking 1.1.9 - 1.2.9 - Missing Authorization5.31.1.9 to 1.2.91.3.0n/a
16 Oct 2026TrueBooker Appointment Booking 1.1.9 - 1.2.9 - Missing Authorization5.31.1.9 to 1.2.91.3.0n/a
16 Oct 2026TrueBooker Appointment Booking 1.1.9 - 1.2.9 - Missing Authorization5.31.1.9 to 1.2.91.3.0n/a
5 Oct 2026TrueBooker - Appointment Booking and Scheduler System <= 1.2.9 - Missing Authorization to Unauthenticated Settings Update5.3<= 1.2.91.3.0n/a
15 Sep 2026TrueBooker <= 1.2.3 - Missing Authorization to Unauthenticated Arbitrary User Email Modification via 'admin_addcustomer' AJAX Action9.8<= 1.2.31.2.4n/a
21 Aug 2026TrueBooker - Appointment Booking and Scheduler System < 1.2.7 - Missing Authorization5.3< 1.2.71.2.7n/a
21 Aug 2026TrueBooker - Appointment Booking and Scheduler System < 1.2.7 - Unauthenticated Privilege Escalation7.3< 1.2.71.2.7n/a
21 Aug 2026TrueBooker - Appointment Booking and Scheduler System < 1.2.7 - Unauthenticated Information Exposure5.3< 1.2.71.2.7n/a
21 Aug 2026TrueBooker - Appointment Booking and Scheduler System < 1.2.7 - Missing Authorization5.3< 1.2.71.2.7n/a
19 Aug 2026TrueBooker - Appointment Booking and Scheduler System <= 1.2.6 - Unauthenticated Privilege Escalation7.3<= 1.2.61.2.7n/a
18 Aug 2026TrueBooker <= 1.2.6 - Unauthenticated Authorization Bypass Through User-Controlled Key to Account Takeover to 'truebooker_wp_user_id' Parameter9.8<= 1.2.61.2.7n/a
14 Aug 2026TrueBooker <= 1.2.6 - Unauthenticated Account Takeover via Insecure Direct Object Reference in 'truebooker_wp_user_id' Parameter9.8<= 1.2.61.2.7n/a
6 Aug 2026TrueBooker <= 1.2.3 - Missing Authorization to Unauthenticated Arbitrary Password Reset via 'tbab-userid'9.8<= 1.2.31.2.4n/a
6 Aug 2026TrueBooker <= 1.2.3 - Missing Authorization to Unauthenticated Arbitrary Password Reset via 'truebooker_wp_user_id'9.8<= 1.2.31.2.4n/a
27 Jul 2026TrueBooker <= 1.2.2 - Unauthenticated SQL Injection7.5<= 1.2.21.2.3n/a
17 Jul 2026TrueBooker - Appointment Booking and Scheduler System <= 1.2.3 - Unauthenticated Privilege Escalation9.8<= 1.2.31.2.4n/a
16 Jul 2026TrueBooker - Appointment Booking and Scheduler System <= 1.2.3 - Unauthenticated SQL Injection7.5<= 1.2.31.2.4n/a
2 Jun 2026TrueBooker - Appointment Booking and Scheduler System <= 1.1.9 - Missing Authorization5.3<= 1.1.91.2.0n/a
30 Mar 2026Truebooker - Appointment Booking and Scheduler Plugin <= 1.1.4 - Sensitive Information Exposure via Views Files5.3<= 1.1.41.1.5n/a
18 Feb 2026TrueBooker <= 1.1.6 - Missing Authorization5.3<= 1.1.61.1.7n/a
15 Dec 2025TrueBooker <= 1.1.0 - Missing Authorization5.3<= 1.1.01.1.1n/a
7 May 2025TrueBooker <= 1.0.7 - Cross-Site Request Forgery4.3<= 1.0.71.0.8n/a
10 Aug 2024TrueBooker <= 1.0.2 - Cross-Site Request Forgery to Settings Update4.3<= 1.0.21.0.3n/a
10 Aug 2024TrueBooker <= 1.0.3 - Unauthenticated SQL Injection10<= 1.0.31.0.4n/a

Sources: Wordfence Intelligence, CISA Known Exploited Vulnerabilities, readme changelogs.

Support

Support history appears after our first snapshots of the forum counts.

Momentum

600+ active installs. History builds with each weekly snapshot.

Momentum history builds with each snapshot.

Healthier alternatives

Same job, rated Healthy, higher Canary Score and at least 10,000 installs. Never sponsored.

No healthier plugin in the same category yet.

Facts

Version1.3.1
AuthorThemetechMount
Added18 Mar 2024
Last updated29 Oct 2026
Active installs600+
Requires WordPress6.5
Tested up to7.1.4
Requires PHP7.4
Categorynot stated
Tagsbooking, scheduling, appointment, booking calendar, appointment booking

Other plugins by this author: TTM AI FAQ Schema for Elementor, FoodBoxBooker, TTM Content Shield

Questions

Is TrueBooker still maintained?

Yes. Last release 29 Oct 2026, 29 releases in the last 24 months.

Who owns TrueBooker, and has it changed hands?

No change recorded. Main committer themetechmount since Mar 2024.

Was TrueBooker removed from wordpress.org?

No. Listed on wordpress.org as of 3 Nov 2026.

Is TrueBooker safe?

25 known vulnerabilities, all fixed (latest in 1.3.0). Not on the exploited list.

Is the latest TrueBooker update safe to install?

No ownership change before 1.3.1. No one-star spike after it.

Data: wordpress.org Plugins API, plugins SVN and Trac, wordpress.org reviews and support forum, Wordfence Intelligence, CISA KEV, NVD.Plugin data refreshed 3 Nov 2026.Report a data issue