Skip to content
Sign in
5.3 Medium

CVE-2026-106003 The Court Reservation WordPress plugin before 1.12.4 does not perform any authorization, authentication or nonce…

Description

The Court Reservation WordPress plugin before 1.12.4 does not perform any authorization, authentication or nonce validation on one of its AJAX actions, allowing unauthenticated users to add or delete reservation types in the Court Reservation WordPress plugin before 1.12.4's configuration.

Affected products and versions

Product Affected versions Fixed in
Court Reservation 1.12 earliest → < 1.12.4 1.12.4

Other CVEs of Court Reservation

The 3 CVEs of Court Reservation →
CVE-2026-106002 The Court Reservation WordPress plugin before 1.12.4 does not perform any authorisation or nonce verification on one of… 5.3 Medium CVE-2026-1508 The Court Reservation WordPress plugin before 1.10.9 does not have CSRF check in place when deleting events, which… 4.3 Medium
Track this CVE