court_reservation vulnerabilities
CVEs whose affected-version data names the court_reservation package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.
2 CVEsRSS
CVE-2026-106002Medium· 5.3Court Reservation < 1.12.4 - Unauthenticated Arbitrary Challenge Deletion
The Court Reservation WordPress plugin before 1.12.4 does not perform any authorisation or nonce verification on one of its challenge-management actions, allowing unauthenticated users to delete arbitrary tournament-ladder challenge rec…
▾ SunlitEPSS 0.23%via CVEORG
CVE-2026-106003Medium· 5.3Court Reservation < 1.12.4 - Unauthenticated Reservation Type Addition and Deletion
The Court Reservation WordPress plugin before 1.12.4 does not perform any authorization, authentication or nonce validation on one of its AJAX actions, allowing unauthenticated users to add or delete reservation types in the Court Reser…
▾ SunlitEPSS 0.27%via CVEORG