Skip to content
Sign in
4.3 Medium

CVE-2026-1508 The Court Reservation WordPress plugin before 1.10.9 does not have CSRF check in place when deleting events, which…

Description

The Court Reservation WordPress plugin before 1.10.9 does not have CSRF check in place when deleting events, which could allow attackers to make a logged in admin delete them via a CSRF attack

Affected products and versions

Product Affected versions Fixed in
Court Reservation 1.10 earliest → < 1.10.9 1.10.9

Other CVEs of Court Reservation

The 3 CVEs of Court Reservation →
CVE-2026-106003 The Court Reservation WordPress plugin before 1.12.4 does not perform any authorization, authentication or nonce… 5.3 Medium CVE-2026-106002 The Court Reservation WordPress plugin before 1.12.4 does not perform any authorisation or nonce verification on one of… 5.3 Medium
Track this CVE