Aller au contenu
Se connecter
5.3 Moyenne

CVE-2026-106003 The Court Reservation WordPress plugin before 1.12.4 does not perform any authorization, authentication or nonce…

Description

The Court Reservation WordPress plugin before 1.12.4 does not perform any authorization, authentication or nonce validation on one of its AJAX actions, allowing unauthenticated users to add or delete reservation types in the Court Reservation WordPress plugin before 1.12.4's configuration.

Produits et versions touchés

Produit Versions touchées Corrigé en
Court Reservation 1.12 premières → < 1.12.4 1.12.4

Autres CVE de Court Reservation

Les 3 CVE de Court Reservation →
CVE-2026-106002 The Court Reservation WordPress plugin before 1.12.4 does not perform any authorisation or nonce verification on one of… 5.3 Moyenne CVE-2026-1508 The Court Reservation WordPress plugin before 1.10.9 does not have CSRF check in place when deleting events, which… 4.3 Moyenne
Suivre cette CVE