CVE-2026-39601

LOW NVD

CVSS Score 3.7

Severity LOW

Published Oct 02, 2026

Vendor unknown

Description

Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition') vulnerability in WPdevelop Booking Calendar booking allows Leveraging Race Conditions.This issue affects Booking Calendar: from n/a through 11.8.4.

References

https://patchstack.com/database/wordpress/plugin/booking/vulnerability/wordpress-booking-calendar-plugin-11-8-4-race-condition-vulnerability?_s_id=cve