Court Reservation (Unknown) - vulnerabilities (CVEs)

3 CVEs, 2 in the last 30 days, 2 known versions, newest CVE from 2026-10-28. Vendor: Unknown.

CVEs of Court Reservation

• CVE-2026-106003 - CVSS 5.3 (medium), 2026-10-28: The Court Reservation WordPress plugin before 1.12.4 does not perform any authorization, authentication or nonce validation on one of its AJAX actions,…
• CVE-2026-106002 - CVSS 5.3 (medium), 2026-10-28: The Court Reservation WordPress plugin before 1.12.4 does not perform any authorisation or nonce verification on one of its challenge-management actions,…
• CVE-2026-1508 - CVSS 4.3 (medium), 2026-03-10: The Court Reservation WordPress plugin before 1.10.9 does not have CSRF check in place when deleting events, which could allow attackers to make a logged in…