CVE-2026-39675

MediumCVSS 5.3

Published: 08/04/2026(UTC)Updated: 24/07/2026(UTC)Translated: 25/07/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.23%

14th percentile - higher than 14% of all known CVEs

Summary

The Court Reservation plugin for WordPress (versions up to 1.10.11) has a missing authorization vulnerability, allowing exploitation of incorrectly configured access control security levels.

Risk Assessment

An attacker can gain unauthorized access to reservation functions or data, potentially leading to system integrity compromise.

Recommendation

Update the Court Reservation plugin to the latest version that includes a fix for this vulnerability.

Original NVD description (English source)

Missing Authorization vulnerability in webmuehle Court Reservation court-reservation allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Court Reservation: from n/a through <= 1.10.11.