CVE-2026-39601

Description

Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition') vulnerability in WPdevelop Booking Calendar booking allows Leveraging Race Conditions.This issue affects Booking Calendar: from n/a through 11.8.4.

References

https://patchstack.com/database/wordpress/plugin/booking/vulnerability/wordpress-booking-calendar-plugin-11-8-4-race-condition-vulnerability?_s_id=cve

https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-91664

Details

Source: Mitre, NVD

Risk Information

CVSS v2

CVSS v3

EPSS