What is GHSA-23ph-p5ph-6wph?

GHSA-23ph-p5ph-6wph is a security advisory published by GitHub Security Advisories with Medium severity. The Court Reservation WordPress plugin before 1.12.4 does not perform any authorization,...

Which CVE IDs does GHSA-23ph-p5ph-6wph cover?

GHSA-23ph-p5ph-6wph covers the following CVE IDs: CVE-2026-106003. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

What is the CVSS v3 score of GHSA-23ph-p5ph-6wph?

GHSA-23ph-p5ph-6wph has a CVSS v3 base score of 5.3, published by GitHub Security Advisories.

GHSA-23ph-p5ph-6wphMediumCVSS 5.3

The Court Reservation WordPress plugin before 1.12.4 does not perform any authorization,...

Vendor

GitHub Security Advisories

Published

October 28, 2026

Last Modified

October 28, 2026

🔗 CVE IDs covered (1)

CVE-2026-106003 →

📋 Description

The Court Reservation WordPress plugin before 1.12.4 does not perform any authorization, authentication or nonce validation on one of its AJAX actions, allowing unauthenticated users to add or delete reservation types in the Court Reservation WordPress plugin before 1.12.4's configuration.

🔗 References (3)

https://nvd.nist.gov/vuln/detail/CVE-2026-106003
https://wpscan.com/vulnerability/1aa4c6a3-e82a-44c2-a267-4f95b657a1aa
https://github.com/advisories/GHSA-23ph-p5ph-6wph