Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

2 records

Release: Court Reservation 1.12.4 Clear all filters
TI-2026-81689 CVE-2026-106003 · GHSA-23ph-p5ph-6wph

Court Reservation Plugin Allows Unauthenticated Reservation Type Changes

Priority LOW 30

The Court Reservation WordPress plugin before 1.12.4 does not perform any authorization, authentication or nonce validation on one of its AJAX actions, allowing unauthenticated users to add or delete reservation types in…

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00268 Published 2026-10-28 Fixed in 1.12.4 CWE-284
TI-2026-81688 CVE-2026-106002 · GHSA-h7f9-2hv5-88jj

Court Reservation WordPress plugin lets anyone delete challenges

Priority LOW 30

The Court Reservation WordPress plugin before 1.12.4 does not perform any authorisation or nonce verification on one of its challenge-management actions, allowing unauthenticated users to delete arbitrary tournament-ladd…

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00231 Published 2026-10-28 Fixed in 1.12.4 CWE-862