Court Reservation
Approved changes feed: RSS · Atom
cpe:2.3:a:unknown:court_reservation:*:*:*:*:*:*:*:*part: a version: * update: *
| Vendor | Unknown (668ca391-a6cc-5e33-879b-83885214de33) |
|---|---|
| Product | Court Reservation (e08fbab8-2d80-5e62-b4ec-3db03c55ef6a) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
Notes
Imported from gcve-enriched-dumps CVE data
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2026-106002 |
vulnerable | 2026-11-03 10:16:14.131896 |
Court Reservation < 1.12.4 - Unauthenticated Arbitrary Challenge Deletion
The Court Reservation WordPress plugin before 1.12.4 does not perform any authorisation or nonce verification on one of its challenge-management actions, allowing unauthenticated users to delete arbitrary tournament-ladder challenge records, along with the linked court-booking event when one was scheduled.
Published: 2026-10-28T06:00:21.524Z
Updated: 2026-10-28T17:58:08.549Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-106003 |
vulnerable | 2026-11-03 10:16:14.122750 |
Court Reservation < 1.12.4 - Unauthenticated Reservation Type Addition and Deletion
The Court Reservation WordPress plugin before 1.12.4 does not perform any authorization, authentication or nonce validation on one of its AJAX actions, allowing unauthenticated users to add or delete reservation types in the Court Reservation WordPress plugin before 1.12.4's configuration.
Published: 2026-10-28T06:00:21.700Z
Updated: 2026-10-28T17:58:08.395Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-1508 |
vulnerable | 2026-06-08 07:49:08.787996 |
Court Reservation < 1.10.9 - Event Deletion via CSRF
The Court Reservation WordPress plugin before 1.10.9 does not have CSRF check in place when deleting events, which could allow attackers to make a logged in admin delete them via a CSRF attack
Published: 2026-03-10T06:00:06.715Z
Updated: 2026-03-10T12:58:58.315Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.
Inspect record JSON
Open this panel to browse, search, copy or download the JSON record.