medium5.3
CVE-2026-106003
The Court Reservation WordPress plugin before 1.12.4 does not perform any authorization, authentication or nonce validation on one of its AJAX actions, allowin…
Impact
The Court Reservation WordPress plugin before 1.12.4 does not perform any authorization, authentication or nonce validation on one of its AJAX actions, allowing unauthenticated users to add or delete reservation types in the Court Reservation WordPress plugin before 1.12.4's configuration.
Affected products
| Product | Affected versions |
|---|---|
| Court Reservation WordPress Plugin | before 1.12.4 |
Versions were read from the advisory text. No structured product data has been published for this record yet.